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INTRODUCTION 1 

This study was performed by the International Business Machines (IBM) 
Corporation In Huntsville, Alabama for the George C. Marshall Space Flight 
Center under contract NAS8-30749. 

The purpose of the study was (1 ) to define the recommended SEPS Com- 
puter System design using performance, reliability and cost as the primtnry 
design parameters and (2) to perform a breadboard demonstration of selected 
system design elements. Redundancy implementation was emphasized and the 
Hybrid Technology Computer (HTC) version of the Space Ultrareliable Modular 
Computer (SUMC) family was used as the basis for evaluation. 

In 1972 and 1973, IBM performed tv/o SEPS Computer System design studies 
(References 1 and 2), These studies, along With IBM's ongoing HTC develop- 
ment activities, provided the foundation for this study. In addition, the 
SEPS Phase B Concept Definition Study was being performed concurrently with 
this study. Maximum advantage was taken to utilize information developed in 
that study to enhance the results of this Low Cost study. and to insure com- 
patibility of SEPS Program Requirements, 

Two major areas were addressed in this study: 

1) Systems Engineering effort which consisted c'*' developing computer 
software and interface requirements,, performing a redundancy 


management and reliability analysis, and defining a computer/I/O 
design. Sections 3, 4 and 5 and Appendices A and B of this report 
document this effort. 

Z) Construction of a SEPS fault tolerant memory breadboard and demon- 
stration of its operation. See Appendix C for documentation' of 
this effort. 

The SEPS subsystem which contains the computer is called the Command 
Computer Subsystem (CCS) and consists of the computer, custom input/output 
(I/O) unit and tape recorder for mass storage of telemetry data. This study 
is concerned only v/ith the design of the computer arid I/O unH. Howeverj 
the reliability analysis was performed for the complete CCS including the 
tape recorders. Data for the tape recorders was supplied to IBM by Rockv/ell 

f 

International Corporation. 


STUDY SUMMARY 2 

A study summary chart is shown in Table 2-1, The chart compares the 
CCS design which v/as developed during this study with the previous CCS design 
(Reference 2). Figure 2-^1 gives a top-level block diagram of the CCS. 

A summary of major study results follows: 

g The SEPS Low Cost Study effort was begun With a review of past SEPS 
reports produced by IBM and Rockwell International Corporation. The 
purpose of this effort was to update our familiarization with past 
studies and to identify SEPS subsystems requirements changes v/hich 
might impact the CCS requirements or interface definition. Based 
on this review, it was concluded that because of the stringent 
SEPS reliability requirement the SEPS computer configuration would 
include a fault- tolerant memory (FTM). 

6 The SUMC has been baselined as the CCS computer. In particular, the 
Hybrid Technology Computer (HTC) version of the SUMC was chosen. 
Because of the advanced state of development of the HTC, a much 
higher confidence level in the computer design is possible now than 
in previous studies. The HTC is a developed machine which has been 
delivered to MSEC. Fault tolerant a.spects of the HTC are in an 
advanced ifcate of development and a breadboard of the fault-tolerant 
memory was fabricated as part of this study » Accurate estimates of 
component failure rates and piece-part counts have contributed to 


Table 2-1- SEPS CCS Design Siiininary 


CCS FUaCTION/PARAHETER 

GOAL 

CURRENT 

DESIGN 

PREVIOUS DESIGN 

1973 

TECH 

1975 

TECH 

REMARKS 

Memory Size (IS-Bits) 

Unspecified 

24K 

(•bSQ^ Contingency) 

m ‘ 

('i.SO^ Contingency) 

Same 

Current design includes 
4K TM buffer 

GPU Speed Requirement 
(!<APS) 

Unspecified 

<6 


<5 


Same 


Weight (Kg 1 
Ob) 

9.1 

<20 

16.5 

36,3 


6.6 

14.5 


3.9 

8,7 

Excludes tape rec. 

Volume (mH 
(in3j 

Unspecified 

0.020 

1210 

i 

1 

0,006 
. 364 


O.Q&l 

216 

Bccludes tape rec. 

Size (cm) * 
(in) 

‘Unspecified 

25.5x56x14 i 

10x22X5.5 

1 10x23x25.5 

4x9x10 

10x14x25,5 

.4x5.5x10 

Excludes tape rec, * 

Average Power (watts) 


42,4 


23 


9 

Includes tape rec. and 
assumes power switching 

Interface Requirements 

Unspecified 

INj 

•OUT 

IN] 

OUT 

Same * 



- 

DIG 38 1 
DIS 151 
ANA 210 1 

6) 

273 ' 

0 

ANA& 
DIG 198 
DIS 95 

2 

188 



FieliabiUty 

^0.95000 

0.95D39 

t 


0.9715 


Same 

Current design includes 
tape recorder, 4K TM 
storage and RAU functions 

Technology 

Memory 

Logic 

Unspecified 

Unspecified 

N410S-LSI 

TTL-LSI 

N410S-LSI 

TTL-MSI 

CMOS-LSI 

CMOS-LSI 


'^mputer 

CPU Data Flow 
Avg Processing Speed 
(KOPS) 

Instruction Set 
Instruction Length 
Data Wort| Length 

Unspecified 

Unspecified 

Unspecified. 

Unspecified 

Unspecified 

i 

16-bit 

^*^250 

S/360 

16/32/48 

16/32/64 


8 -bit 

, MOO 
TC2 
-1.6 
16/32 


Same 

. Same 
Same 
Same 
Same 

• 

input power 

30 + Q.3VDC 

Nominal 28 VDC 
unregulated 

Nominal 28 VDC 
unregulated 

Same 

• 

Thermal: 

Operating ("C) 
standby (“c) 

Unspecified 

Unspecified 

-55'“ to +80“ 
-55“ to +125“ 

-55“ to +80“ 
-55“ to +125“ 

Same 

Same 

• 














increased confidence In the reliablVity and redundancy manageinent 
analysis performed during this study. (Reftjrence Section 4.2.2), 

A requirements analysis v/as performed which emphasized CCS signal 
interface definition and refinement of the previous software sizing 
study. Through coordinated efforts with the SEPS Phase B Study 
concurrently being conducted, a detailed list of interface signals 
and characteristics was developed. The baseline computer memory 
is 24k of 16-bit words. This includes 4K of telemetry data sto»^age 
and approximately SQ% contingency. (r.eference Section 3). 

One of the major tasks of this study v/as to define the redundant 
custom I/O design. Emphasis was placed upon defining I/O hardware 
to interface the CCS with other SEPS subsystems. A trade study was 
performed which resulted in incorporating into the custom I/O most 
of the functions which had been previously performed by Remote 
Acquisition Units (RAU). (Reference Section 4.2,3), 

A reliability and redundancy management analysis was performed using 
updated study groundrules. The advanced state of development of the 
HTC also permitted more accurate estimates of component failure rates 
and piece-^part counts. The CCS reliability goal of 0,95 for a three- 
year, unmaintained mission v/as met. This was accomplished con- 
sidering the additional impacts of (1) ah increased memory size. 


(2) additional equipment In the I/O to perform most of the RAU 
functions, and (3) Inclusion of tape recorders as a part of the CCS. 
(Reference Section 5). 

• Additional trade studies were performed which contributed to the CCS 
baseline definition. Results of these studies are: 

Incorporate 4K I6~b1t word telemetry data storage in main memory 
rather than having a separate redundant buffer storage (Refer- 
ence Section 4.2.4). 

Adopt the centralized data acquisition concept within the custom 
I/O rather than having several RAU's distributed throughout the 

SEPS vehicle. (Reference Section 4. 2. 3. 2.1). 

• Since the fault tolerant memory is crucial to meeting the SEPS 
reliability goal, it was chosen as the computer system element 
which would be breadboarded. (Reference Appendix C) . 



CCS REQUIREIVIENTS 3 

This section contains an updated electrical interface definition and an 
updated estimate of the onboard software requirements in terms of memory 
capacity and computer speed. The study reflects changes which have occurred 
in the SEPS study groundrules and SEPS subsystem desigti since the previous 
study (Reference 2) was completed. The major assumptions which impact re- 
quirements definition are listed below: 

Signal conditioning and formatting is done by the CCS for all sub- 
systems except the solar array and propulsion subsystems 
Ten ion engines are baseline 
Eight power processors are baseline 
Four Hg propellant tanks are baseline 

SEPS for planetary missions has 16 RCS thrusters and both hydrazine 
and krypton RCS propellant. SEPS for earth orbital missions has 26 
RCS thrusters using hydrazine 

SEPS for planetary missions has high gain communication antenna, an 
X-band and S-band system. SEPS for earth orbital missions has TV 
system 

Interface between the CCS and each power processor in the propulsion 
subsystem consists of one serial digital channel for sending commands 
and for receiving status data 

Local remote acquisition units are located at the solar array wihgs 
to convert and multi pTex sol ar array current, voltage and temperature 
me a su remerits. 
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3.1 INTERFACE DEFINITION 


Early in the $tudy an effort was. undertaken to define detailed CCS signal 
interface data, The result of this effort is shown in summary form in Table 
3-1, and detailed interface definition is given in Appendix A. 

Generally, the interface requirements increased from the previous study. 
More emphasis was, placed on interface definition during this study and more 
detail was available for other subsystems. The data developed in this section 
V/as used in defining the custom I/O design (Reference Section 4.2.3), 

'3.2 SOFTWARE SIZING . 

A thorough software sizing review was conducted of the two previous 
studies which IBM performed (References 1 and 2). This review along with co- 
ordinated effort with the SEPS Phase B study concurrently being conducted 
permitted an updated softv/are sizing to be developed. 

3.2.1 major CHANGES 

Below is a summary of the major baseline software sizing changes from 
the data developed in, Reference 2, Comments are applicablq to both SEPS plane- 
tary and earth orbital missions unless otherwise Irdicated. Table 3-2 
summarizes the; :changes. ' ; \ 


. • ■ • ...... 

3 . 2 . 14 ! - Memory 'Capacity / - 

Total memory storage capacity requirements decreased by approximately 6 % 
for SEpS planetary missions and increased by approximately 6% for SEPS earth 
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Table 3-K SEPS CCS Interface Requirements Summary 



Quid,, Nav. & Att. Control 

Propulsion 

Communications 

CCS/DHS 

Solar Array 

Structures & Mechanisms 
Thermal Control 
Power Distribution 
*Attached Science Package 

TOTALS 


CCS OUTPUTS 


DIG 

DIS 

ANALOG 

20 

58(84) 

0 

8 

52 

. .0 

8(4) 

14(13) 

0 

3(6) 

12 

0 

4 

10 

0 

2(0) 

70 

0 

0 

0 

0 

0 

18 

0 

16(0) 

39(0) 

0 

61(42) 

273(259) 

0 


CCS INPUTS 


DIG 

DIS 

ANALOG 

12 

32(46) 

86(107) 

0 


16 . 

3 

0 

31(28) 

0 

4 

4 

2 

12 

2 ■ 

2(0) 

26(22) 

15 

0 

P 

0 

0 

19 

27 

19(0) 

18(0) 

29(0) 

■ (17) 

151(143)' 

210(199) 


*Planetany missions only 

NOTE: When Earth Orbital mission interfaces are different from Planetary mission 
interfaces, Earth Orbital interface requirements are enclosed in 

^ '..Tarehtheses^': '■■■■■' /■ Iv" ' 


Table 3-2. SEPS Software Sizing Summary 




PLANETARY 



EARTH 

ORBITAL 




WAS 


IS 


WAS 

IS 



MEMORY 

SPEED 

MEMORY 

SPEED 

MEMORY 

SPEED 

. MEMORY 

SPEED 

Executive 

2175 

0.72 

2175 

0.72 

2175 

0.72 

2175 

0.72 

Propulsion 

1476 

0.92 ^ 

1476 

0.92 

1476 

0.92 

1476 : 

0,92 

Attitude Control 

■4465 

0.67 

2483 

0.81 

4465 

0.67 

2688 

0.85 

Guidance & Navigation* 

110 

0.03 

TIG 

0.03 

462 

0.02 

2097 

(11097) 

1.14 

(2.50) 

Data Handling** 

485 

0.13 

742 

0.14 

485 

0.13 

765 

0.14 

Communications 

1193 

0-29 

1934 

0.47 

1030 

0.15 

1386, 

0.24 

Solar Array 

180 

0.15 

180 

0.15 

180 

, 0.T5 

180 

0.15 

Power Di s tri buti pn ■ 

0 

0 

350 

0.15 

0 

0 

350 

0.15 

Mechanisms 

107 

0 

105 

0 

127 

0 

125 

0 

Thermal 

0 

0 

0 

0 

0 

0 

0 

0 

Redundancy Management 

1795 

1.31 

1597 

1.19 . 

1945 

1.31 , 

1747 

(2197) 

1.29 

(1.S9) 

Science Payload 

0 

/ 0 

200 

0.01 



— . 



11986 

4.22 

11352 

4.59 

12345 

4.07 

12989 

(22439) 

S.60 

(7.26) 


^Includes Approach Guidance Sensor 
**Does not include 4K telemetry data requirements 
Memory sized in 16-bit words 

Speed sized -in thousands of equivalent add-operations, per second (KAPS) 
( ) Indicates hi gh-auconoiny G&N (Optional) 


orbital missions excluding the 4K telemetry buffer which vms added to main 
memory (Reference Section 4.2.4'). Major items which contributed to these 
changes are given below. 

Attitude Control 

This softv/are sizing decreased by nearly 50^ reflecting the change from 
processing star mapper sensors to processing star tracker equipment. 

Guidance & Navigation 

This software module Increased from approximately 500 words to approxi- 
mately 2000 words for earth orbital missions, reflecting the requirement to 
perform more G5N functions onboard. Examples are: vehicle and target state 
propagation, laser radar processing for rendezvous', and rendezvous guidance. 

Data Handling 

The data handling function increased approximately 35SS due to additional 
telemetry measurements to be processed. 

Communications 

Planetary mission sizing Increased approximately 60% and earth orbital 
mission sizing increased approximateTy 40% due to the identification of addi-^ 
tional ground commands which must be processed onboard. 

Power Distribution 

this is new software that has been sized for this study. ;PrevioUsly ho 
softv/are had been required for the control of equipment in this subsystem. 
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RedundanGy Management 

This softy/are sizing had a net decrease of less than 10^ due priniarny to 
the addition of coniniuni cations subsystem redundancy management and the decrease 
in data handling and electrical functions. 


Science Payload 

This is new software sizing that has been sized for this study to provide 
support to SEPS planetary mission payl oads. Previous studies did not consider 
payload function logic, . 

3.2. 1,2 CPU Speed 

Total CPU speed requirements increased by approximately 9 % and 385J for 
planetary and earth orbital missions, respectively. The major items which 
contributed to the increases are listed below. 

Attitude Control 

GPU speed requirements for this function increased about 2C% due to the 
increase in the number of instructions required for attitude reference and 
TVC/RCS processing, 

Guidance Navigation 

For earth orbital missions, the increase in the CPU speed requirements 
for this function accounted for almost all of the total, change. Additional 
G&H functions were added to the'baseline SEPS, with the vehicle state propaga-^ 
tion execution rate accounting for most of the increase. ■ : : 


Comniuni cat1 ons 

Additional comaiands v/hiclw/ere added during this study caused an increase 
in the execution rate. 

3.2.2 DETAILED SIZING DATA 

Tables 3~3 and 3-4 give the summary software sizing requirements for the 
SEPS planetary and earth orbital missions, respectively. Appendix B gives 
the detailed software sizing requirements for the SEPS planetary and earth 
orbital missions. A description of each software function is given below. 
Comparisons are made with the previous ^tqdy (Reference R). 

3., 3.2.1 Executive 

No changes are recommended to the Executive function sizing for either 
the planetary or earth orbital missions. See Page 6-14 of Reference 2 for a 
detailed description of the Executive function. 

3. 2. 2. 2 Propulsion 

Contact was made with Hughes Research Laboratories (HRL) by Rockv/ell 
International, HRL recommended no sizing changes for this function. See 
Page 6-16 of Reference 2 and Page. A-15 of Reference T for a detailed descrip- 
tion of propulsion subsystem subtasks,. 

3.212.3 Attitude Control 

Inertial Attitude Reference - This software sizing was slightly redesigned 
to add attitude error compensation and to change some data to singl e precision. 


Table 3-3.- 


SEPS Planetary Mission Software Sizing Suinmary 



INSTRUCTIONS 
(16-BITS) . 

DATA 

(16-BlT.S} 

TOTAL 
[1 6-BITS) 

SPEED 

(KAPS) 

EXEGPTIVE:- 

: 1115 

1060 

2175 

0.72 

PROPULSION ■:■ 

1203 

273 

1476 

0,92 

ATTITUDECONTROL";: 

T813 

670 

2483 

0,81 

GUI DANCE AND NAVIGATION . 

.30 

80 

no 

0,G3 

DATA HANDLING* 

140 

602 

742 

0.14 

COMMUNICATIONS 

1519 

415 

1934 

0,47 

SOLAR ARRAY. 

i5o': 

30 

; ISO 

0,15 

power: DIST.:::- 

150. 

::200 

350 , 

0.15 

MECHANISMS v: 

0 

105 

. 105 

0 

THERMAL : : ;:r 

. 0 

0 

0 

0 

REDUNDANCY management 

1242 

355 

1597 

1,19 

SCIENCE payload / 

150 

50 

200 

O-Ol 

■ Total ^ 



11352 

4,59 


*Does not in cl u'ds 4K; telemetry data requirements. 


Table 3-4. SEPS Earth Orbital Mission Software Sizing Summary 



INSTRUCTIONS 

(16-BITS) 

DATA ^ 
(16-BITS) 

TOTAL 

(16-BITS) 

SPEED 

(KAPS) 

EXEGUTIVE ■: 


1060. 

2175 : 

0.72 

PROPULSION : 

1203 

273 ; 

1476 

0.92 

ATTITUDE CONTROL I 

1853 

835 ; 

2638 

0.85 

GUIDANCE AND NAVIGATION 

1820 

(9330) 

277 

(1767) 

2097 

(11097) 

1.14 

(2.50) 

DATA: handling* 1 

140 

625 

765 

0.T4 

COMMUNICATIONS . 

1064 

322 

1386 

0.24 

SOLARARRAY;- 

■ 150 

30 

: 180 

0.15 

POWER DlSTJ ;: 

150. 

200 

350 

0.15 

mechanisms 'V 

,0' 

125 

125:' 

0 

THERMAL 

o; 

0 

0 

0 

redundancy MANAGEMENT 

1342 

(1642) 

405 

(555) 

1747 

(2197) 

' 1.29 
(1.59) 

.TOTAL::.! 



12989 

(22439) 

5.60 

{7.26} 


( ) >- High-autonomy G&N (optional) 


^Doesnot inclyde 4K telemetry 


data requirements. 


star Tracker Processing - The previous SEPS study had baselined the use of 
star mappers rather than star trackers* This sizing reflects a substantial 
reduction in storage requirements v/hich resulted with the change to star 
trackers. The difference in the amount of data required for planetary and 
earth orbital missio. IS is due to the larger star table required for the earth 
orbital missions. 

TVC/RCS Processing - This module siting increased slightly due to the 
current TVC design having all engines gimballed rather than having only four 
engines gimballed for roll control and pitch and yaw control performed by X-Y 
translators. The larger sizing for earth orbital missions reflects the re- 
quirement for RCS translation control for docking. 

For more detail on the attitude control subtask descriptions, see Page 
6-16 of Reference 2 and Page A-18 of Reference 1. 

3. 2. 2. 4 Guidance and Navigation 

Planetary Missions 

No change is recommended for this sizing. See Page 6-17 of Reference 2 
for further details. 

Earth Orbital Missions 

This sizing was changed significantly from the last study to refine and 
incorporate functions whi ch ha"d previgusl y been i denti f i ed as optional - Tv;o 
cases were sized; 
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1) Low Autonomy case v/here significant ground interface is involveds v/ith 
cotimunications talcing place once each day i 

2) High Autonomy case where minimum ground contact is involved, v/ith a 
near optimal guidance scheme progrcrnimed onboard. 

The: baseline selection is the low autonomy case which is consistent With 
current Rockwell International studies. However, the high autonomy concept 
is being retained as an optional configuration. Keference.l2 documents a 
study by IBM concerning low vs. high autonomy SEP5, 

Detailed software G&H subtask descriptions for the baseline SEPS concept 
follows: 

Mid-course Guidance 

A polynomial guidance scheme was selected for the baseline sizing. This 
scheme generates polynomials of guidance commands based on an independent varia- 
ble which is chosen to yield the simplest polynomial. The two-axis guidance 
commands are used as inputs to the attitude control routines, 

State Propagation 

This software module integrates the equations of motion to determine SEPS 
velocity and position. These parameters are used to determine the local verti- 
cal reference frame and the argument of latitude, Parameters may be updated : 
from the ground.. 


Sun Direction PGterml nation 

This routine computes the sun vector and transforms the dat^ to the 
computational coordinate system to generate attitude control commands. Nor- 
mally, sun sensor output data is used by this routinej but it is capable of 
determining the location without sun sensor input. 

Navigation Update 

For the baseline, low-autonomy concept navigation updates are not. calcu- 
lated onboard but are transmitted to the SEPS by ground command. 


Target State Propagation 

This routine integrates the equation of motion of the target to determine 
target position and velocity. These peremeters can be updated from the ground 


Laser Radar Processing 

This Routine smooths and biases the laser radar data to improve the data 
accuracy for rendezvous. 

Rendezvous Guidance 

This routine uses the vehicle state vector, the target state vector, and 
laser radar information to determine the relative position and closing rates 
of the SEPS \*/ith the target and to compute the guidance commands required for 
rendezvous.. . 


Mode Control 


The mode control commands are associated v/1th the phases’ of the mission, 
such as mid-course, coast, rendezvous, and docking. The mode commands are 
set to initiate the required functions during the different mission phases. 

3.2. 2*5 Data Handling 

This function has been incorporated into the CCS. Two subtasks were 
sized: 

Telemetry Processing 

This software sizing was increased due to an Increase in the number of 
parameters to be telemetered from 336 to 578 for planetary missions and 601 
for earth orbital missions. See Page 6-17 of Reference 2 for additional 
details. 

Data 'Storage Management 

This item replaces and expands upon the ’’Tape Recorder Control" sizing 
contained in Rockv/ell International study Exhibit E. In addition to tape 
recorder control, there is the requirement to control the buffer storage. Ad- 
ditional logic is sized to control the transfer of data between buffer storage 
(in main memory) and the recorder, and between these components and the com- 
munications subsystem. 


3, 2.2. 6 Communications 


Planetary Missions 

Antenna Pointing and Control - This sizing v;as increased slightly to 
account for the logic required to switch low gain antennas automatically. See 
Page A-27 of Reference 1 for additional detail. 

Command Processing - This sizing is based upon processing 324 ground 
commands with 55 requiring special command processing. This includes 64 and 
14j respectively, for science payload commands. See Page A^27 of Reference 
1 for additional details. 


Mode Control - See Page A-27 of Reference 1 for details. 


Earth Orbital Missions 

Low Gain Antenna Switch - This software was added to account for the 
logic required to switch low gain antennas automatically. 

Command Processi ng - This sizing is based upon processing 259 ground 
commands with 39 requiring special command processing. See Page A-27 of 
Reference 1 fof additional details. 

Mode Control - See Page A-27 of Reference 1 for details. 

3. 2,2.7 Solar Array 

Solar Array Length Control - This sizing has been reduced to reflect that 
the solar array length control is commanded from the ground and no automatic 
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control is provided on board (i.e. automatic solar flare detection). Some 
logic is still required to respond to the ground commands. 

Peak Power Computation 

This software was added to more accurately determine peak power available 
from the solar arrays. A power curve v/ill be stored in the onboard computer 
and periodically updated by monitoring the real available pov/er from the solar 
arrays. This data will be used by the propulsion subsystem for power level 
and power margin management, 

3. 2.2.8 Power Distribution 

In previous studies, the only power distribution softv/are that v;as con- 
sidered was associated with redundancy management (i.e. no power distribution 
control software was sized). For this study, hov/ever, the onboard computer 
will perform the logic necessary to perform functions such as povjer calcula- 
tions, battery charging control, orderly power down of equipment to the 
keep-alive mode, initial equipment power-up sequencing, and measurement feed- 
back monitoring. Since detailed operating modes and computer functional 
requirements for power distribution have not been defined, this software 
sizing estimate is considered preliminary, and emphasis should be placed on 
refining this sizing during follovj-on studies. 

-3. 2, 2. 9 Mechanisms 

Planetary Missions 

The only change to this software was a reduction in the Antenna Deploy- 
ment sizing to reflect that the Omni antennas dp not require deployment. See 
Page A-31 of Reference 1 for additional data. 
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■ Earth Orbital Missions 

The only change to this softv/a re v/a5 the deletion of the function . " 
Antenna Deployment because the omni antennas no longer require deployment , 

See Page 3-10 of Reference 1 for additional data. 

3.2.2.10 Thermal 

There Is no software logic required for the thermal subsystem. All 
heaters are thermostatically controlled vn'th ground override command 
capability. 

3.2.2.11 Redundancy Management 
PI an e tary Mi s s i o n s 
CCS/DHS 

The sizing for the computer and data handling was combined into one 
sizing. The computer sizing v/as. left unchanged. The only data handling func- 
tions which were sized v;ere. temperature and servo phase detector monitoring 
of the tape recorders to detect failures so that the redundant tape recorder 
could be Used. 

Power Distribution 

: This sizing combined the sizing for Electrical Power and Stage Power and 

Distribution functions. 


Communications 

This software Was. added in this study to perform redundancy management 
the following components: S-Band TWTA, X-Band TViTA, S-Band Exciter and 

Receiver. 


See Page A-31 of Reference T for additional details. 

Earth Orbital Tiissions 

Deltas are the same as planetary missions with the following exceptions. 
Guidance/Navi qati on 

Added additional sizing for the autonomous G&N case to account for more 
detailed redundancy management that is required. 

Communications 

This software was added in this study to perform redundancy management 
on the following components: TV Telemetry Section (TTS) Transmitter, TTS 
Exciter, S-Band Exciter and Receiver. 


3.2.B.12 : Science Payload 

^ added during this study to reflect onboard 
computer requirements for a typical science package for a pTanetary mission. 

It specifically incl udes a Scan PI atform and Magnetometer Bias control . ■ Also, 
a small amount of additional software; was included to provide simple sequencing 
functions in response to a ground Command to initiate the science sensors. : 


CCS FUNCTIONAL DESIGN 4 

4.1 GENERAL 

This section describes the definition of the baseline CCS design. Recept 
changes have occurred in the SEPS program v/hich had to be evaluated to deter- 
mine their CCS design Implications. These changes were: 

- Updated software sizing requirements (Reference Section 3.2) 

Updated CCS interface definition (Reference Section 3.1) 

1976 technology cutoff date 

New CCS reliability allocations (Reference Section 5) 

Addition of dual redundant tape recorders to the CCS 

- Requirement for the CCS to temporarily store up to 4K of 16-bit 
telemetry words (Reference 4.2.4 below) 

Incorporation of the bulk of the SEPS subsystem data acquisition 
functions into the CCS (Reference 4. 2. 3. 2.1 below). 

Various computer configurations were considered to determine the most 
cost effective design which could meet the SEPS requirements. The CCS relia- 
bility requirement of *0.95 for a three-year, unmairitained mission was the re- 
quirement which was the configuration driver. To meet this stringent require- 
ment, the fault tolerant memory configuration was chosen based on cost, weight 
and volume considerations. (Reference Section 5 for the Reliability and 
Redundancy Management Analysis) . And, in particular, the fault tolerant ver- 
sion of the HTC was chosen to comprise the basic element of the CCS. 



4.2 DESIGN CONSIDERATIONS AMD DESCRIPTION 
4,2.1 TECHNOLOGY SELECTION 

The previous study (Reference 2) carried two technology baselines, one a 
1973 TTL baseline and the second a 1975 CMOS baseline. The current study 
groundrule is a 1976 technology, and IBM has selected this to be TTL for the 
following reasons. First, custom low- volume/low-cost CMOS chips are not 
currently available nor projected to be available by the 1976 time period 
because of vendor policies which directly impact customization. Principle 
CMOS vendors are tending to offer low prices for very high production devices 
and to discourage custom chip designs with higher prices, because small quanti- 
ty buys of customized CMOS produces low and unpredictable yields. Second, the 
failure rate data for LSI CMOS devices is not as reliable due to their 
relative newness as compared with the long term, wide data base developed for 
TTL devices derived through extensive military, NASA, and commercial usage. 
Third, lov/ cost custom TTL or bi-polor LSI is available with integration levels 
greater than 130 gates per chip from high volume commercial users. Finally, 
MSEC support of the SUMC in the highly reliable and fault tolerant areas is 
being developed in TTL logic.. Examples are the design of system logic chips 
for the translator and the demonstration of a design of a TTL compatible 
fault tolerant memory. 


Bi-polor technology selection does not preclude the use of other technolo- 
gies required for special applications. An example is the use of N-MOS Basic 
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storage Modules (BSM’s) that uniquely satisfy the single bit-per-BSM require- 
ment as defined in the previous SEPS study report (Reference 2) for the fault 
tolerant memory. 

4.2.2 COMPUTER DESICM 

After reevaluation of the computer considering the revised requi rements j 
no significant changes were found to be necessary to the basic computer 
configuration as proposed in the previous study. A five fault tolerant 
memory, redundant CPU's, error correction translators, power supplies, sv/itch- 
ing circuits, and support hardware were found to be required to meet the CCS 
reliability goal. During this study period the Hybrid Technology Computer 
(HTC), a member of the SUMC family of computers, was delivered to MSEC. Its 
increased programming flexibility derived from the Systsms/360 instruction 
set and its functional slice packaging technique (a CPU/slice) are representa- 
tive of the concepts necessary for the implementation of the functionally 
redundant low cost SEPS computer. 

4.2.2. 1 Main Memory 

The fundamental approach of the five fault tolerant main memory has not 
changed from that presented in the previous study except that the maximum 
memory size estimate has increased to approximately 13K of sixteen-bit v/ords. 


To maintain adequate contingencies, 20K v/ords of storage are necessary 
to provide about 50^ spare memory capacity without incorporation of a 4K 
telemetry memory buffer (Refeifence Section 4.2,4 for a trade study concerning 
incorporation of the telemetry buffer into the main storage). For SK x 1 bit 


of storage in the fault tolerant configuration, twenty-six of the Basic Storage 
Modules (BSM) are required (16 for data, 6 for check bits, and 4 spares)* 

Some separate memory support Togrc is also necessary. For 20K of storage, 78 
BSM’s are required: 52 BSM' s containing one 8K x 1 bit chips and 26 containing 
one 4K x 1 bit chips. The depopuTatian of 26 BSM's helps to conserve pov/er* 

To minimize non-recurring costs, full addressing capability is retained for a 
potential Tnemory increase to 24K. x 16 bit words. Full population of three 
8K pages would require 78 BSM's containing one 8K x 1 bit chips, 

4, 2.2,2 Translator/CPU 
Translator 

Design of the translator has produced three significant improvements, . 
Two involve the input/output reconfiguration switches* 


First, the BSM input reconfiguration switches have been eliminated* When 
a failed BSM is detected, a spare BSM is assigned the same bit position as the 
failed BSM. Both receive data after correction is achieved by the trans- 
lator in an automatic read-correct-write cycle. The output of the failed BSM 
is, then disconnected, but its input remains connected* Only one BSM reassign- 
ment is made at a time as opposed to adding a BSM at the end of a v/ord. and 
"bumping" the contents of each BSM d-//' one position. This was equivalent 
to a shifting operation and invol ved more BSM switching hardware than individual 
replacement. In addition, the new technique should be faster* 


The second change in the concept reflects that it is more efficient to 
design translators in conjunction with the CPU and to dedicate a translator 
to a CPU rather than switching a translator between CPU's. This precludes 
uneven distributions of translator and CPU's and eliminates switching com- 
plexity betv/een CPU/translator. 

The third design improvement v/as its implementation in self-testing 
(similar to two rail) logic which is dynamically self-checking and allov/s 
immediate indication of a translator error. Spare translator/CPU's can then 
be switched into the system upon error detection. 

CPU 

Four SUMC CPU options with an 8K x 16-bit non-fault tolerant memory v/ere 
considered for CPU trades, and trade data are presented in Table 4-1, The 
previous baseline was the 8-bit SUMC CPU executing 47 aerospace instructions. 

As seen from this table, the 16-bit data flow TTL-LSI CPU has an advantage 
in programming ease using the S/36Q 86 instruction set because it is a familiar 
set easily programmed with extensive software tools available to the programmer 

Its average power is not significantly higher than the others, and in a tri- 
plex configuration the failure rate results in an acceptable reliabil ity for 
three years (Reference Section 5 for reliability details). Its weight is 
comparable With all other CPU candidates except the N-MOS LSI, but that 
technology has a high development cost and risk. All units have adequate 
throughput capability. The higher the speed provided, the lower the average 


Table 4-1:, SUMC CPU Trade Data 


DATA 

FLOW 

TECHNOLOCY 

INSTRUCTION 

SET 

SYSTEM 

POWER 

PEAK/AVG 

(WATTS) 

CPU 

FAILURE 

RATE 

XI 0-6 

SYSTEM 

WT 

(Kg) ■ 

n 

RELATIVE 

DEVELOPMENT 

RISK 

SYSTEM 

NON-RECURRING 

COSTS 

(RELATIVE) 

SYSTEM 

RECURRING 

COSTS 

(RELATIVE) 

8-BIT 

TTL LSI 

4tt(TC 2),47 

45/10 

2.82 

3.6 

150 

2 

T.l 

0.9 

■B-BIT 

TTL LSI 

S/360, 80 

54/11 

4.42 

3.6 

65 

2 

1.1 ■ 

0.9 

8- BIT 

W-MOS LSI 

S/360, SO 

25/8 

2.59 

1.4 

100 

10 

1.4 

0.8 

16-BlT 

(HTC) 

TTL LSI 

S/360, 86 

60/13 

5.56 

4.6 

250 

1 

1 

1 


:o Previous Baseline - 1973 Technology 
00 Recoitimended Current Basel i ne 


















power required since a low duty cycle is possible and pov/er sV'fitching can 
effectively reduce the average power consumed. The 16-b1t HTC has the largest 
speed capability of these options and, hence, the most potential for pov^er 
savings by selective power svn’tching. Finally, the development and production 
costs of the 16-bit data flow HTC are significantly lower because it is a 
developed product which will be partially qualified for space environments in 
time for the SEPS missions (MIL-E-5400 Class 2X). 

4. 2.2. 3 Clock 

Continuous clock signals must be supplied to the memory and translators. 
Accordingly, the previous study proposed a design for fault tolerant clock and 
logic timing circuits. TMR plus one spare redundancy v;as proposed in the 
previous study (See Figure 4.1.3 of Reference 2), and this redundancy has been 
retained in this study. 

The previous study recommended that the dual redundant power supplies be 
operating at all times which allowed for powering the TMR plus spare clocks. 

In this study phase it was found more advantageous from power and weight 
considerations to operate only the TMR oscillators and clock circuits until 
switchover to a redundant power supply can be achieved, nominally within 10 
msec. Since power must be retained on the monolithic N-MOS memory at all 
times, it is recommended that small, battery power supplies be included in 
the CCS to power clocks, reconfiguration switches and main memory in the 
event of bus or regulated power supply failure. Normally, the batteries 
would be floating slightly under normal bus levels but' kept charged by the 
power distribution subsystem at a trickle charge rate. 
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4. 2. 2. 4 Reconfiguration Control 

The reconfiguration control concept for the CCS has not changed from the 
previous study (See Reference 2, Figure 4.1.6) except that a more definitive 
technique for attaining high coverage has been designed for the CPU, translator 
and power supply. For the CPU a coded self- test is currently being evaluated 
under contract to MSFC which will detect CPU faults. The previously defined 
CPU window timers are retained; however, the CPU self-test is now predominately 
macro-oriented rather than microcoded. It requires approximately 150 mach- 
ine instructions and an execution time of about 1.6 milliseconds with the 
baseline GPU executing a System/360 fixed point instruction set. Since the 
CPU speed is high and SEPS computation time requirements are low, the self- 
test may be run many times per second making it highly effective, tote that 
no additional microprogrammed Control Store or microcontrol read-only-memory 
(MROM) is required for this approach, which uses three elements for CPU fault 
detection: 

(a) Special macro tests 

(b) Hardvnred window GO/ NO-GO timers 

(c) Use of existing machine check and program check interrupts to stop 
the GO/NO-GO timer 

4. 2. 2. 5 Power Supply 

A three power supply configuration has .been retained; however, they are 
now implemented in the highly reliable hybrid design currently used in the HTC. 
A minimum of 10 miniseconds power switchover time to an essentially no-load 
or standby supply has been demonstrated. The minimal current to be drawn by 


the supply and its recovery time to within specification limits requires fur- 
ther study for this particular application. No-load on supplies tends to cause 
instability and to slow power-up events, while partial load i<Z0%) dissipates 
useless power and contributes to unreliability. Acceptable switchover times 
need to be established for CCS detection, reconfiguration, and restart, 

To conserve pov;er the CPU, translators and main memory are placed in a 
lov/ power mode when not being actively used. This is particularly beneficial 
for SEPS applications because of its low duty-cycle requirement. ON/OFF 
demand power switching is used for the CPU and translators and the utiliza- 
tion of a low power mode is used for the memory, Memory voltages are lowered 
when an 8K x 16-bit module is not enabled. Lowering supply voltages retains 
memory content while reducing consumed power. Reconfiguration switches and 
TMR clocks are powered at all times. The active tape recorder is pov^ered 
only during infrequent write/dump modes. Only one customized I/O is pov/ered 
at a time. However, certain portions must remain powered in the operating 
I/O. This topic is discussed more fully in Section 4.2.3. 

Table 4-2 presents average CCS pov;er requirements including power supply 
inefficiency of 65SS. 

4.2.3 CUSTOM I/O DESIGN 

One of the major tasks of this study was to review, reassess and revise 
the preliminary design of the custom I/O documented in Reference 2. Emphasis 


Table 4-2. Average CCS Power Fiequfrements 


COMPUTERS. 
CUSTOM I/O** 
TAPE RECORDER 
4K BUFFER 


20K MEMORY -f 4K TM BUFFER 
24.4 

12.3 
2.0 
4.6 

43.3 WATTS 


* INCLUDES 16-BIT CPU & ALL BSMs POWERED 
DOES NOT INCLUDE circuits: EXTERNAL TO CUSTOM I/O 


24K MEMORY (NO TM BUFFER) 
28.1 

12.3 ■ 

2.0 


42.4 WATTS 


v/as placed upon defining I/O hard\7are to interface the CCS with other SEPS 
subsystems, 

4.2,3, 1 General Description 

The custom I/O provides the capability of interfacing the general pur- 
pose SUMC computer with the SEPS subsystems. It is composed of two identical 
halfs, but only one-half of the I/O is pov7ered-on at any given time. To 
further conserve power, power switching techniques are applied inside the I/O. 
The custom I/O contains a redundant command subsystem interface for accepting 
ground commands. All custom I/O operations, with the exception of the command 
subsystem, are controlled by the CPU. Data flovj to and from each I/O section 
is via two sixteen-bit buses, which interface vn’th three CPUs via the switching 
logic. A block diagram of the custom I/O interfaces with the CPUs and the 
other SEPS subsystems is shown in Figure 4-1. 

A hybrid I/O approach was baselined for the SEPS program. This means 
that the I/O physical package contains most of the required receiver and 
driver circuits necessary to interface directly with each subsystem. Direct 
interface is achieved with all SEPS subsystems, except the solar array and 
the propulsion subsystems. Serial data transmHsion is used to interface 
with these two subsystems. This centralized approach to data acquisition is 
the major difference between the current design and the design documented in 
Reference 2. 
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Figure 4“1, Custom I/O Interfaces 

























Each half I/O section contains an input sectionj an output section 
and a timing and control section* The input section contains receivers, 
converters, registers and gates necessary to control the input signal onto 
the 16-bit data bus. The output section contains registers, gates and 
drivers ’to generate the required outputs to the various SEPS subsystems. The 
timing and control section interfaces with the CPU switching logic and directs 
bus traffic. 

Output signals from each half I/O section, which are driving a simplex 
subsystem, are diode isolated and connected together inside of the I/O. Sim- 
plex inputs to the I/O are internally connected to both half sections. 

The command interface logic of the I/O is Triple Modular Redundant (TMR). 
Three identical sections contain receiver circuits, 16-bit input registers 
and decode/control logic. The register outputs are connected to the I/O input 
bus through voter isolation circuits. Interrupt flags from the command 
interface logic advise the CPU v/hen data is being received and/or when the 
command register is full. Special commands can be received which bypass the 
normal CPU input path. 

The custom I/O will direct and control data to and from the telemetry 
buffer whether the buffer is located in the fault tolerant main, storage 
(baseline) or as an external unit. Telemetry formatting is performed by 
•software. Data fetch commands are generated by the CPU and responses from 

the subsystems are loaded directly into the telemetry buffer. Discrete outputs 
for controlling the tape recorder and buffer (if external) are channeTed 
directly to discrete output registers in each I/O section. 
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The fonov/lng sections describe trade studies which were performed and 
give details of the I/O design. 

4, 2. 3. 2 I/O Design Trades 

Two major design trades were conducted during this study. One was 
centralized vs remote data acquisition, and the other was an interface 
circuitry concept trade. These analyses are described below. 

4. 2. 3. 2.1 Remote Versus Centralized Data Acquisition 

A study was performed to determine the relative merits of a centralized 
acquisition unit vs a set of remote data acquisition units for data collec- 
tion, conditioning and control. This section describes the advantages of 
each approach and recommends a baseline design. 

Remote Data Acquisition 

A system utilizing remote acquisition units which converts, formats and 
codes/decodes data remotely from the CCS and communicates that data to and/or 
from a centralized interface device via a single channel is shown in Figure 
4-2A. This system would utilize a standard-design remote unit placed as re- 
quired at the major subsystems. The advantages of a remote acquisition sys- 
tem are discussed below; 

a. EMI characteristics - Conversion of analog signals would take place 
in close proximity to the subsystem where the analog measurements 
were bsi.ng taken. The transfer of data to/ from the centralized 
unit would be in the form of a digital word; therefore, certain 
error checking (at least parity) could be easily accomplished, 
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b. Maintainability - Maintainability prior to launch would be enhanced 
by the use of six RAUs as opposed to one centralized I/O. Logistic 
spares for the smaller RAUs could be easily handledj tested, and 
stored. 

c. Physical mounting - Mounting of a set of RAUs v/ould be more expedient, 
due to the fact that a small isolated space near the subsystem could 
be used to mount an RAU. A centralized I/O would require a larger 
area for mounting. 

d. H eat dissipation - Heat dissipation on a distributed system is more 
even. This results in few, if any, "hot spots" and better heat 
transfer qualities for the equipment bay. 

Centralized Data Acquisition 

A centralized I/O is one in which all multiplexing, conversion, coding 
and formatting is done at a centralized location, usually a single structure, 
and the interface with the CPU is made via a single data path. A block dia- 
gram of a typical centralized I/O is shovm in Figure 4-2B. Advantages of a 
centralized I/O are listed below: 

a. Spacecraft size - The small size of the SEPS equipment bay lends 
itself to a centralized approach vvith the longest cable run less 
than ten feet. 

b. Equipment size and weight - The centralized approach v/ould save 
weight and volume. Fewer partitioning walls, structures and con- 
nectors would be required . Volumetric efficiency would be enhanced 
by more efficient usage of input/output circuitry, 1.e., a standard 
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I/O for an RAU might have only 40-50 percent usage at one location 
and another subsystem v/ould be overloaded with fevi or no spare I/O 
circuits. In a centralized approach, the input/output circuit can 
be distributed evenly among various subsystems. 

c. Power distribution - Power distribution to the I/O circuitry is 
greatly enhanced by the centralized approach. With all I/O cir- 
cuitry located in one structure, pov/er distribution is internal 
to the I/O box, thus minimizing noise and IR losses in the power 
lines. In a remote acquisition system redundant power would be 
distributed to each remote acquisition unit. This v/ould increase 
power supply regulation problems, noise problems on power lines 
and cable weight. 

d. Reliability - In a single structure, reliability is enhanced since 
sv/itching control lines are self-contained and are not cabled 
external to a centralized I/O box. This saves weight, reduces the 
possibility of noise Injection on switching lines, and increases 
reliability. 

Conclusions 

Table 4“3 gives a summary of the centralized vs remote data acquisition 
analysis. Primarily because of advantages in weight, power and reliability, 
a centralized approach is recommended. Hov/ever, there are tv/o SEPS subsystems 
which should be treated as special cases. These are the solar array and 
propulsion subsystems* 
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Table 4‘'3. Centiralized ys Ramote Data Acquisition Trade 

parameter Centralized I/O. Distributed I/O 


EMI Compatibility + 

Weight/Size + 

Heat Dissipation + 

Power Distribution ++ 

Reliability • + 

Packaging + 

Maintainability + 

Spacecraft Mounting + 

Spacecraft Cabling + 


Legend: + = Slightly Better 

++ - Significantly Better 
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Solar array subsystem - There are approximately Z5Q temperature, voltage 
and current measurements originating in the solar array subsystem. Because 
of the volume of measurements to be handled, it is recommended that a combina- 
tion multiplexer /analog-digital converter be located at each solar array v/ing 
to reduce the number of input signals to the CCS. 

Propulsion subsystem - The pov/er processor units in the propulsion sub- 
system contain analog/digital converters, conditioners and formatters v/fnich 
accomplish the function of data acquisition. Therefore, the only accommoda- 
tions required of the I/O is to interface v/ith serial digital lines from the 
propulsion subsystem, 

4. 2. 3.2,2 Interface Circuit Concepts 

SEPS CCS interface concepts must be defined prior to detailed hardware 
specification. Three important inter-related factors must be considered in 
f/eiecting interface circuit concepts. They are; 

1. Electromagnetic interference compatibility 

2. Failure independence related to redundant interfaces 

3. Failure detection philosophy associated vdth redundancy management 

High electromagnetic interference levels are anticipated on SEPS because 
of the noise-generating nature of the solar el ectric engines, Althouglv specific 
levels have not been determined, interference signals could easily be greater 
than the three volts expected as a result of Viking experience (Reference 3)., 
Techniques are available to permit reliable operation in a noisy environment 
without risk. Hov/eVer, these techniques are more complex than those used on ■ 
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Viking, In addition^ CCS reliability requirements dictate I/O redundancy, 

This^ consideration is also instrumental in defining interface concepts. 

Related to interface definition is failure detection and redundancy 
management. Redundancy management can influence both I/O circuit design and 
the quantity of circuits involved. 

This section treats each of these aspects independently and then 
recommends concepts v/h1ch take combined aspects into account. 

EMI Interface Interconnection 

Methods of minimizing EMI effects are well understood. Principles 
can be applied to inter-unit communication to reduce unnecessary interference 
and permit proper operation in a relatively noisy environment. Since the 
CCS signal interface consists of several hundred measurements and commands j 
overdesign could result in excessive reliability, power, weight and cost 
penalties. Thus, tradeoffs are in order. 

The approach recommended is to employ conservative engineering practice 
when penalties are not severe and design so that noise rejection levels are 
predictable and can be improved by additional shielcfing. Clarification of 
this point is the subject of the follov/ing discussion. 

Fundamentals of EMI compatibility are well documented (Referenees 4 to 7) 
Interference is unwanted signa'* noise coup! ed directly by power distri bution 
circuits or indirectly by radiation and conduction , (common impedance current 


paths). Noise injection directly throitgh the power system is controlled by 
unit pov/er supply requirements and is not discussed here. Of interest is the 
interference introduced via signal interface wiring. Fundamentals are re- 
viev/ed briefly prior to evaluating interconnection options. 

EMI Compatibility 

Interference coupling is accomplished by electric field (capacitive 
coupling), magnetic field (inductive coupling), and common impendance conduc- 
tion. The most troublesome radiation coupling is via strong, lov?-impedance 
magnetic fields. Key parameters for reducing magnetic field coupling are 
shoy/n in Lenz's Law: 

V-nA^B 

where, 

V = open circuit induced voltage 

n = number of turns 

A “ circuit area 

B = magnitude of the field 

~ time rate of change (frequency) 

Thus, inductively coupled interference voltage can be reduced by decreasing 
the interference field strength, B, the circuit area, A, and the interference 
frequency. 

ShieTdihg is generaTly effective in reducing electric field energy, 
independent of frequency, and magnetically coupled energy at high frequency* 
Conversely stated, shielding has minimal effect in attenuating strong 


fields, especially at lov/ frequency, so that reducing the area of the inter- 
face circuit is important. 

Figures 4-3 and 4-4 taken from Reference 5 illustrate this point. Six- 
teen circuit configurations are shown (Figure 4-3) along v/ith the induced 
voltages (Figure 4-4). The greatest difference in pickup occurs between cir- 
cuit ir5 and circuit uQ. Circuits #1 to ^5 provide an alternate return path 
through the ground plane, thus increasing the area of interference exposure. 
Shielding has little effect at the low 400 Hz interference test frequency. 
When the ground plane return path is not provided, tv/isting the signal v/ires 
reduces circuit area (and provides some cancellation) and further minimizes 
interference pickup. 

Loveland and Goodwin (Reference 8) tested several cable types and also 
compared EMI susceptability to an unshielded reference wire. Their work (see 
Figure 4-5) also illustrates the aforementioned principles but, in addition, 
shows the cable/shielding effectiveness as a function of frequency. Circuit 
configurations for their tests were similar to circuit ir4 for the coax sample 
and circuit 19 for the twisted shielded pair. Note that significant inter- 
ference attenuation over a wide frequency range is demonstrated via balanced 
transmission and tv/isted shielded cabling. Shielding accounts for high 
frequency noise rejection and twisting, and balanced reception provides low 
frequency rejection* Balanced reception is implemented via transformers, 
relays and differential amplifiers. 
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figure 4-3. Cable and Shield Configurations 
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Figure 4-'4. Induced Voltage Using Figure 4-3 Configurations 


4-24 


I i 

i- 


I 







j 1™,-.- J - -1-. 


Mohr (References 9 and 10) formulated expressions for predicting inter 
ference coupling levels in various cable types above a ground plane. His 
analysis includes noise sources of both a sinusoidal and transient nature. 

t I 

Figure 4-6 is a graph from Reference 10 shovnng coupling from a transient | i 

source into (1) an unshielded specimen, i nd (2) a shielded RG58C/U coax. | 

Parameters were selected as representative of a typical SEPS cable configuration. j 

For a quantitative example applicable to SEPS, consider two parallel | 

five-foot cables, impedances as given in Figure 4-6, and a 10 ampere current 

transient of one microsecond rise time. Coupling into an unshielded cable 

v^^ill produce a peak interference signal = 0.19 times 10 amps times five 

feet = 9.5 volts. Into the shielded line V„ = (0.0014) (10)(5) = 0.07 volts. i 

t : 

Thus, shielding can be extremely effective if interference coupling can he j . 

restricted to higher frequencies via radiated paths. The amount of coupled I 

interference is a direct function of frequency, but fortunately the magnitude j 1 

of low frequency noise is also lower. Curve one, of Figure 4-7, illustrates 
noise induced into an RG58C/U sample as a function of frequency. As indicated, 
shield effectivity begins at about 1 KHz. Curve two shov/s the typical effect 
of double shielding. This curve was generated by squaring the shield attenua- 
tion factor provided by RG5ac/LI and is shown for illustration only. It does 
suggest that high frequency noise can be substantially eliminated by properly 
applied shielding, and that noise from one to 10 KHz will be most troublesome. 

In the previous discussion, all coupling is from a single interference 
cable source into a single test specimen. The analysis is obviously magnified . 
when hundreds !of cables are involved. Often noise is picked up by circuits 

J . 
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that are inadvertently created by ground connections (ground loops). The 
subsequent result is that reference ground potentials vary, causing apparent 
shifts in signals that rely on a common ground reference (single-ended trans- 
mission). Since shielding is ineffective at low frequency, good reference 
ground potentials are difficult to maintain, especially in large vehicles 
(Targe areas). Although the SEPS vehicle is relatively small, the high 
interference levels make it difficult to maintain a good ground reference sys- 
tem. A good reference system should be possible, however, if low impedance 
ground loops are avoided. 

From the above discussion, the following general conclusions and 
recommendations are proposed; 

0 SEPS interfaces should avoid large circuit areas and ground loops. 
This approach minimizes magnetic field pickup and makes shielding 
effective. 

0 Interfaces should employ balanced receiver devices extensively. 

This creates configurations similar to circuits #6 to #16 in 
Figure 4-3. 

, 0 Cables and unit assemblies should employ shields to protect against 
transient and high frequency noise. 

0 On critical, low level, or high accuracy measurements, balanced 
transmission and reception over twisted shielded cable should be 
considered. 

Specific cabling details and signaling characteristics should be addressed 
in follow-on Phase B studies. 
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Driver/Receiver Options 

Interface driver/receiver circuits can be classified as one of three 
types: (1) single-ended (SE), (2) double-ended (DE), or (3) differential 

(DIFF). Circuits can be linear (analog) or non-linear (logic). 

Definitions 

Single-ended driver circuits use a ground or other dc level as a refer- 
ence return. The signal voltage rises relative to this reference and is 
analogous to on/off binary signals in communication theory. This circuit 
configuration is generally the simplest and has the lowest failure rate. 

Signal swing may be either positive or negative with respect to the reference 
voltage. 

Double-ended driver circuits are defined to be dual, single-ended drivers 
with complementary outputs (i.e., one swings positive while the other swings 
negative with respect to the other). Double-ended drivers generally do not 
have a balanced output impedance with respect to ground. 

Differential drivers are dual output circuits with lines balanced with 
respect to ground. Si gnat* voltages on the lines also swing in opposite 
polarity relative to each other. 

Single-ended receiver circuits, which again are the least complex, 
measure input voltages with respect to a fixed reference. The reference, 
generally ground, is relative to the receivers power supply system. Input 
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signal sources accordingly must lae connected to the receiver's power supply 

« 

ground. 

Double-ended receiver circuits are dual, single ended receivers. 

Differential receivers have differential amplifier input circuitry and 
provide an output proportional to the potential difference between the two 
input lines. Differential receivers also exhibit common mode rejection 
properties. 

Practical Interface Options 

Figure 4-8 illustrates six candidate driver/receiver pairs. Each is 
discussed briefly below: 

0 Single-ended to Single-ended (SE to SE) 

Although the simplest circuit combination, single-end to single-end 
transmission schemes require a common ground reference and transfer 
accuracy is no better than the ground system. Wiring connections 
are analogous to circuits #1 to #5 of Figure 4-3, which are the most 
noise sensitive. In addition,, the single-ended logic or discrete ' 
receiver is a threshold detection device with a fixed threshold. 
Noise susceptability is established by (1 ) the accuracy of the 
signal ground reference, (3) the signal amplitude, and (3) the. 
threshold setting. 

0 Single-ended to Differential .{SE to DTFF) 

This combination uses the simple unbalanced driver into a balanced 
'differential receiver. The signal at the receiver output is 
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referenced with respect to the two input lines and, in the ideal 
case, independent of receiver power supply references. Since the 
driver is unbalanced, the circuit combination provides Tittle or 
no common mode rejection. -As Indicated in Figure 4-8, when used 
for digital signals, the output of the differential receiver front 
end will still require a threshold detection circuit, 

0 Double-ended to Double-ended (DE to DE) 

This configuration could be considered for digital communication. 

It provides little noise immunity, but it is noise and failure 
detectable. 

0 Double-ended to Differential (DE to DIFF) 

This configuration is especially attractive for high rate digital 
communication. Ground reference shifts appear as common mode and 
are rejected by the receiver. It also provides common mode rejec- 
tion to noise coupled onto the transmission cable to an extent 
determined by driver output impedance balance. 

0 Differential to Double-ended (DIFF to DE) 

This configuration is similar to the double-ended to double-ended 
' circuit but offers some additional ground reference shift 
insensitivity. 

0 Differential to Differential (DIFF to DIFF) 

k. 

This is the least noise susceptible and generally involves the most 
complex circuitry. It provides high common mode rejection against 
both ground reference and externally coupled noise. 
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Isolation 


Electrical isolation techniques can fae i-sed with the interface circuit 
options. Isolation schemes utilize transformers , light emitting diodes or 
relays. Isolators will eliminate requirements for a ground reference and 
tend to make drivers and receivers act as differential devices. 

Table 4-4 provides a summary of signal method comparison. The table 
illustrates that no one method is best for all signal applications. 

Failure Isolation Options 

Standby sparing redundancy is planned for the I/O. Effective redundancy 
management dictates that any single failure in a function should not prevent 
the spare unit from operating. Since at least dual redundant input/output 
sections are required, all interfaces with the I/O will involve failure 
tolerance considerations. In some instances, redundant sources and output 
sinks are also involved. 

Implementation of redundancy can employ cross-strapping or single-string 
approaches with cross-strapping generally providing highest reliability. How- 
ever » cross-strapping also places the greatest demand on redundancy management 
and design detail. -Failure isolation considerations discussed here apply to 
cross-strap applications. 


4-34 


Table 4”4. Signal Method -Conipanson 



IN BAND 

NOISE 

REJECTION 

CMR 

(TYPICAL) 

SYSTEM 

NOISE 

SUSCEPT 

PWR 

DISS 

RELIABILITY 

COST/ 

SIZE 

SE to SE 

C^Th) 1 

( 0 ) T 

1 

3 

3 

3 

SE to DIFF 

C< Th) 1 

( 0 ) 1 

2 

2 

2 

2 1/2 

DE to DE 

(^.Th) 1 

/OetectsA 
\CM j 2 

2 

2 

2 

2 

DE to DIFF 

CVp 2 

(>Q) 1 1/2 

2 1/2 

2 

2 

2 

DIFF to DE 

Cvp 2 

/Detects) 

\GH 72 

2 1/2 

1 

1 

1 

DIFF to DIFF 

CV3I 3 

{> 4 Qdfa )3 

3 

1 

1 

1 


LEGEND: 

RELATIVE RATINGS: 3 IS BESTy 1 IS LEAST ATTRACTIVE 

= less THAN BUT APPROXIMATELY EQUAL TO 
Th = threshold VOLTAGE WHICH DEPENDS ON SIGNAL AMPLITUDE 
Vc = SIGNAL. VOLTAGE 
' CM « COMMON MODE NOISE 
CMR = COMMON MODE REOECTION 


Practical isolation options include the following: 

0 Active Isolation - dual output drivers and/or receivers are employed, 

0 Resistor Isolation - when loading effects such as shorts permit, 
resistive isolation is often the most economical, 

0 Diode Isolation ^ logic signal with unidirectional current flow can 
use diodes to isolate electrical short failures. Diode isolation 
usually requires poweringnlown the unused spare. 

0 Field Effect Transistor (FET) Isolation - FETs can be used for 
linear signals and low level logic if impedances permit. 

Combinations of the above are candidates for the SEPS I/O design with the 
best method determined by the signal characteristics, criticality and transfer 
accuracy. 

Recommended SEPS Interface Design 

Input Signals 

Figure 4-9 summarizes the recommended configurations for redundant signal 
input interfaces to the I/O. Most of the various signal types anticipated 
for- SEPS are included. Specific signal handling treatment will be required 
in the generation of hardware specifications. 

Output Signals 

Figure 4-10, summarizes recommended the configurations for redundant CCS 
outputs. 
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Recofninendations Include consideration for EMI., as discussed prein’ously, as 
well as failure isolation. The treatment is general and accordingly each 
signal interface definition will require a review of all trade considerations 
in follow-on Phase B studies. 

4. 2. 3, 3 Recommended I/O Design 

The recommended I/O design is a hybrid design utilizing a centralized 
I/O with two remote acquisition units to handle high density signals to and 
from the solar array and propulsion subsystems. The I/O contains redundant 
input circuitry, output circuitry, I/O timing and control, command interface, 
and data handling circuitry. A block diagram of one-half of the custom I/O 
section is shown in Figure 4-11, and Figure 4-1 shows the overall I/O block 
diagram. 

The basic I/O design utilizes the common parallel input and output data 
bus concept. Data flow from the CPU to the I/O is accomplished via a 17-b1t 
output bus which transmits both address and data on a time-shared basis. The 
I/O timing and control circuitry checks parity of the incoming data, decodes 
the I/O address, gates the data onto the output bus and generates a load 
strobe to the selected output register. Input data to the I/O is conditioned 
or converted (in the case of analogs), then gated onto the input bi’j to be 
read by the CPU. In the case of a read command, the timing and control cir- 
cuitry checks parity of the command word (address) from the CPU, decodes the 
command, issues a strobe pulse to gate the data onto the I/O input bus, gen- 
erates a parity bit, and gates the I/O input data to the CPU. In the case of 
both a read and write command, the I/O timing and control circuitry generates 
all "handshaking” commands necessary to interface with the CPU. 
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Figure 4-11 * One-Half Custom I/O Section Block Diagram 



































The I/O provides the interface between the telemetry buffer, located in 
main storage, and the tape recorder or TM transmitter. The CPU collects TM 
data from I/O inputs, stores this data in the TM buffer in main storage; then 
when the buffer is full, the data is read to the tape recorder or TM downlink. 
The I/O provides all timing and control signals to the tape recorder or TM 
transmitter to perform this operation. 

The design of the I/O section is divided into three major categories: 
Input Circuitry, Output Circuitry, and Timing and Control Circuitry. Each of 
these is discussed in detail below. 

4. 2. 3. 3.1 I/O Input Circuitry 

The custom I/O input circuitry is divided into the following categories; 
critical discretes, housekeeping discretes, parallel digital words, serial 
digital words, and analog Inputs, Storage will be provided for * put 
types with the exception of housekeeping discretes. 

A typical group of critical discrete inputs is shown in Figure 4-T2. The 
output of the receiver circuit is connected to the clock input of a D flip- 
flop; the D input of the flip-flop is connected to a logic level ’'one". The 
leading edge of the discrete input will clock a "one" into the storage cell. 
The Q side of the flip-flop is connected to a 16-input NANO gate to generate 
an interrupt level to the CPU. The level of Interrupt will dictate to the 
CPU which input channel is to be serviced. Following a read command from the 
CPU, the I/O timing and control circuitry will issue a. clear command to the 
channel, which will reset all of the 16 bits of the discrete input group. 
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Critical discretes will be grouped into 16-bit patterns. This is done, to 
facilitate the reading of the discretes onto the I/O 16-bit input bus. Each 
group of 16 bits will generate a unique interrupt level to the CPU. 

Housekeeping discretes will not be provided with storage elements in the 
I/O. These discretes will be polled at a regular Interval dictated by the 
program resident in main memory. These discretes will also be grouped into 
16-bit patterns as ware the critical discretes. The grouping will be done v/ith 
respect to the sampling rate of the discretes. The housekeeping discretes will 
be buffered by a receiving circuit and gated onto the input bus by a decoded 
read command from the I/O timing and control circuitry. 

Parallel digital words transmitted from a subsystem to the I/O will not be 
stored in the I/O if storage for that word is provided in the subsystem. If 
no storage is provided in the subsystem, the parallel word will be loaded 
into a parallel /parallel register in the I/O. A block diagram of a typical 
parallel word from a SEPS subsystem to the I/O is shown in Figure 4-13. As 
was the case with critical discrete inputs, critical digital words will gen- 
erate an interrupt to the CPU. A decoded read command from the I/O timing and 
control logic will gate the stored data onto the input bus. Non-critical or 
housekeeping words will be polled by the CPU at a predetermined rate. 

Serial digital data received by the I/O will be loaded into a serial to 
parallel register, as shown in Figure 4-14. The CPU will read the parallel 
output by issuing a read command for that data channel. There are three pos- 
sible methods of clocking- the serial data from the subsystem to the I/O: 
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1) The subsystem could generate and supply the load command and th§ 
clock to the I/O; 2) The I/O could supply the clock to the subsystem for 
clocking; 3) The subsystem could generate a self-clocking code such as 
Manchester II. At the present time the best In terms of simplicity, relia- 
bility, power and volume is item (1). This scheme is shown in Figure 4-14, 

The relatively high number of analog inputs dictates the use of a two- 
level analog multiplexer. A block diagram of the I/O analog input multiplexer 
is shown in Figure 4-15. A two-level analog multiplexing scheme will be used 
to receive and process analog inputs to the custom I/O. This will allow the 
multiplexing of up to 256 single ended analog inputs or 128 double ended 
analog inputs. 

The first level of multiplexing consists of up to 16 16-input mux cir- 
cuits, The subsystem analog inputs are connected to the inputs of these multi- 
plexers. The outputs of each of the first level multiplexers (16 of 256} are 
connected to one of the 16-input channels of the second level mux. The output 
of the second level mux (1 of 256) is connected to the input of a buffer circuit 
for' impedance matching and error reduction. The output of the buffer circuit is 
connected to the input of the A/D converter. The converted analog channel is 
gated onto the input bus to the CPU in the same manner as the discrete inputs. 

The analog address register receives eight bits of analog address from 
the I/O timing and control section for each analog channel to be read by the 
CPU. This address is broken into two four-bit address codes. The four low 
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order bits select one of the sixteen inputs at each of the first level mux's; 
the four high order bits select one of sixteen inputs of the second level 
mux (i.e., the high order bits select the output of one of the first level 
mux's) to be routed to the A/D converter for conversion. 

4.2.3 3.2 I/O Output Circuitry 

The custom I/O will provide discrete, serial digital and parallel digital 
word outputs to various SEPS subsystems. These outputs v/ill be controlled by 
the CPU. In order to perform this function, the I/O will receive from the 
CPU a command, a write address, and 16 bits of data. The I/O is structured 
such that the 16 data bits v/ill be set onto a common 16-bit parallel output 
bus; the decoded address will then be used to gate and strobe the data into 
the proper output register. All .iscrete outputs will be high level (+28 Vdc) 
capable of driving the specified subsystem load impedance. Serial and parallel 
output words will be TTL compatible. 

A simplified block diagram of a group of high level discrete outputs is 
shown in Figure 4-16. The data which appears on the I/O output bus will be 
strobed into a 16-bit holding register by a decoded load command generated by 
the I/O timing and control circuitry. If the discrete to be issued is of the 
pulsed type, the load command will also start the pulse generation circuitry, 
which is a counter set to generate a pulse of specified duration. The output 
of the pulse generation circuitry is ANDed with the output of the output reg- 
ister. The output of the AND gate will control the high level driver (shown as 
an MPN transistor), turning ON for the length of time set by the pulse circuitry. 
Isolation diodes are connected in series with the output to provide failure 
protection for both halves of the redundant I/O section. 
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Serial and parallel digital outputs of the I/O are shown in Figure. 4-17. 

Serial outputs are generated when the I/O receives a write command from 
the CPU for a specific serial word. That word is loaded parallel into a parallel 
to serial register. The data is then clocked serially to the subsystem. The 
clock is also routed to the subsystem where it may be used to clock in the 
serial word. Parallel digital outputs are simply loaded into a holding register 
by the I/O timing and control circuitry and presented to the receiving subsystem 
through drivers. 

4. 2. 3. 3. 3 I/O Ti ’^ iing and Control Circuitry 

The I/O timing and control circuitry provides all timing signals, load 
and control signals, data routing, address decoding, parity generation and 
checking and generation of all "handshaking" signals with the CPU. The I/O 
will be power cycled in order to conserve power when a particular function is 
not in use. However, the control circuitry which interfaces with the CPU and 
the critical discrete inputs are in a powered state at all times. A block dia- 
gram of the timing and control section is shown in Figure 4-18. 

Communication between the CPU and the I/O is accomplished via a 17-bit 
output bus (lOBO), a 17-bit input bus (lOBI) and seven "handshaking" control 
lines. Primary communication to and from the I/O is accomplished by the Direct 
Out and Direct In sequences. 

Write Sequence 

To load data into an I/O discrete output channel, parallel digital word, 
channel, ■ ■ serial digital output channel, the Direct Out sequence is 
followed. This sequence is shown in Figure 4-19. In this figure, negative 
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levels are active and a sequence of events 1s depicted rather than actual time 
intervals. 

To start a write operation to the I/O, the CPU Issues the lOCMD cominand 
and places the I/O register address on the I/O output bus (lOBO) line simultan- 
eously. The I/O win Issue a data request signal (lODREQ) to the CPU which tells 
the CPU that the command was received. The Information on the IGBO lines Is 
parity checked and parity 1s stripped; If parity Is good, the sixteen data bits 
are loaded Into the 1/0 address register. The address information is decoded 
and gate conditions are set (Read/Write, DO/DI, channel number, etc.). 

The DREG line Is then deactivated, signifying the completion of the first 
word transfer. Following delays and settle time, the DREQ line Is activated 
by the I/O, starting the second word transfer. The second word Is the data 
word which is parity checked, stripped, and placed onto the I/O output bus. 
Following a small delay, the timing and control logic generates a LOAD OUTPUT 
strobe which is ANDed with the decoder gates to generate a load pulse to one 
unique I/O output register. The sequence 1s then terminated by the I/O 
deactivation of the second DREQ signal. 

Read Sequence 

To read data from the I/O discrete Inputs, analog Inputs, serial and 
rarallel Inputs the Direct In sequence will be followed. This sequence is 
shown in Figure 4-EO. The CPU starts the sequence with simultaneous issu- 
ance of lOCMD and the seventeen bit parallel word which designates the I/O 
Input channel address that the CPU wants to read. Parity is checked and 
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stripped, and the command word is decoded. Decode gates are conditioned to 
allow the strobing of the selected word onto the I/O input bus. In the case 
of the analog inputs, the analog address register is loaded with eight bits 
which will select the proper analog channel to be routed to the I/O converter. 

The handshaking sequence for a Direct In sequence is the same as that 
for a Direct Out except the second word (data word) is on the input bus lines 
and parity is generated for this word in the I/O. 

The formatting and bit allocation for both the Direct In and Direct 
Out sequence are shown in Figure 4-21. 

Critical Input and Telemetry Readout 

When a critical input is received by the I/O, the Input circuitry will 
generate an interrupt which is unique to that input group. The I/O timing 
and control circuitry will store this interrupt, generate a code word, and 
generate the necessary interrupt handshaking signals to the CPU, Whan the 
GPU receives an interrupt, it will perform a Direct In sequence to read the 
critical input register. Following this operation, the I/O interrupt register 

will be cleared unless another interrupt has been received during the ser- 

* 

Vicing of the first interrupt. In that case, the next interrupt will be 
processed. 


The telemetry buffer will be located in main storage for the baseline 
SEPS design. Therefore, TM data will be accumulated by polling TM channeis 
and loading (via Direct In sequence) into the aTTocated 4K word buffer* In 
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order to read this data out to either the tape recorder or the TM transmitter, 
a sequence called Buffered I/O will be performed. In this sequence, the CPU 
will, when the buffer Is full, issue to the I/O an address command follov/ed 
by a sequential reading of the buffer. The I/O will alternately parallel 
load and then serial output the buffer data at a 32 kbps rate to the tape 
recorder or TM down link at a 1 kbps data '"ate. The transfer of buffer data 
is under the control of the CPU, 

Power Switching 

In order to conserve power, the I/O will employ pov/er switching. The 
spare I/O will be completely powered down, but the operating I/O will power 
only the section of the I/O which is being used. The ijiming and control 
section and the critical inputs will be powered at all times. The discrete 
outputs, serial outputs, parallel outputs, telemetry outputs, analog inputs, 
serial inputs and housekeeping discretes will be power cycled to conserve 
power. 


Error Detection 

The custom I/O will employ a BITE register, parity bits and feedback 
to detect equipment malfunctions. 

As previously stated in this section, word transfer betv/een the CPU and 
I/O will contain a parity bit. Odd parity will be checked by the I/O before 
any function is performed. Should a parity error be detected, an interrupt 
will be issued to the CPU by the I/O. 
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A BITE register will be provided in the I/O design to check bus trans- 
fer. The BITE register v/ill be loaded by a Direct Out sequence. The BITE 
register is then read by a Direct In sequence. This will serve to check both 
the I/O input and output buses, I/O timing, I/O parity and some I/O decoding 
circuitry. 

It is recommended that certain output signals from the I/O be func- 
tionally wrapped to an I/O input to provide end-to-end verification of a 
correctly commanded I/O output. On the issuance of a disc>'ete output to a 
relay, an unused relay point could be used to tie to a discrete I/O input. 
Ideally, the discrete input v/ould take place following the completion of the 
commanded action. 

4.2.4 TELEMETRY DATA STORAGE TRADE 

A trade study v;as performed to determine the recommended method of 
implementing a telemetry buffer to temporarily store telemetry data prior 
to transferring the data to either the tape recorders or to the communications 
subsystem. The options were to provide a separate, redundant 4K 16-bit word 
buffer or to incorporate the additional sterage requirement in main memory. 

Functional requirements for the operation of a telemetry buffer are: 

1. Housekeeping data is to be received from SEPS subsystems at 
32 bps. 

2. The computer formats the data and transfers it to the buffer at 
32 bps. 
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3. When the buffer is full (every 2000 seconds), the buffer transfers 
data to the tape recorder at 32 KbpSj, taking approximately 2 seconds. 

4. Once per week, the tape recorder transfers data to the buffer at 
1 Mbps until full. 

5. The buffer then transfers the data to the communications subsystem 

at 1 Kbps. ! 

I 

6. Steps 4 and 5 are repeated until all the data is transmitted to 1; 

the ground. 

i 

7. All data transfers are under control of the computer or ground j 

command. 1 

I 

t 

8. The buffer need not be random access (operation is first in-first :| 

i 

out). 1 

i 

.! 

I 

'! 

Using these assumptions, a preliminary design was performed for a | 

I 

separate buffer using low power off-the-shelf CMOS devices except for TTL j 

, % 

^ r 

line drivers. A non-redundant version has a volume of approximately 4000 cm'^, j 

i 

weighs 4.6 Kg and consumes approximately 5 watts of power including an j 

I 

assumed 6555 power supply efficiency. 

Table 4-5 summarizes the results of the trade. System reliability in- 
eluding the TM function in the CCS is higher with three separate TM buffers; |. 

however, the overall CCS reliability is still adequate with the 4K buffer jf 

in the fault tolerant memory. Five faults are tolerated v^ith a 24K memory j 

[ 

vs. two faults with a redundant external buffer. The trade is approximately J 

■ ■ ■ ■ 

evert in pbwer required since memory utilizes a low power switching mode when | 

not addressed. Development cost favors the buffer in main memory. The 20K 1 

i 

t 

> . ■ • • I 

n 
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Table 4-5.^ TM Buffer Trade Data 
« 

SYSTEM: PARAMETER 
CCS Reliability 
Redundancy 
CCS Power (Average) 

Dev. Costs'* 

Recurring Costs* 

Weight Delta 

Interconnection Complexity 


*Relat1ve costs on a scale of 1-10. 


20K F.T. MEMORY + 
SEPARATE 4K TM BUFFER 

0.95650 

Tolerates 2 Faults 
43.3 Watts 
5 
5 

+14 Kg (+30 Lb) 

High 


Higher numbers represent higher 


24K F.T. MEMORY 
0.94991 

Tolerates 5 Faults 
42.4 Watts 
<1 
2 

Negligible 
Very Low 


costs. 


J 


J 


J 




...i 


of memory requires the integration costs of three slices (BK + 8K + 4K).of 

main storagej each is identical except the BSH's on the third page contain 

half the number of chips as those on the 8K pages. However, development and 

production of the separate triplex TH buffer is unioue. To go from 20K to 

24K no redesign is required. Recurring costs for a 24K memory are only the 

cost of fully populating an existing designed 8K page. Finally, a weight 

penalty of approximately 14 Kg is incurred with a separate memory. The weight 

of additional memory chips to go from 20K to 24K is negligible, less than the 

allowable tolerance on the weight of conformal coatings applied to slices or 

boards from computer to computer. Finally, the interconnections of three 
, * 

separate 4K buffers is more complex than that of the addition of 4K of storage 
to a proven 20K fault to’-^rant memory. 

Considering the above, a 24K fault tolerant memory has been baselined, 
incorporating the 4K telemetry buffer in main memory. 

4.2.5 CCS BASELIHE DEFINITION 

4.2. 5.1 General 

Figure 4-22 presents a block diagram of the SEPS CCS baseline. The main 
differences from the Reference 2 baseline are: 

0 The HTC was recommended as the baseline CCS computer. It has a 

16-bit data flow CPU capable of executing 86 System 360 instructions. 
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Figure 4-22. SEPS Baseline CCS Block Diagram 
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SUBJECT TO THE nCSTRICriOH OM 
ITHE TITLE PACE OP THIS DOCUMEKT 


use OR DlfiClOSURE DP THIS DATA IS 
SUBJECT TO THE HEnRICTlON QH 
ITHE TITLE PAQ£ OP THIS DOCUMENT 


0 , An increase in size of the 5 fault tolerant memory from 16K of 
16-bits to 24K of 16-bits, which includes 4K telemetry buffer and 
approximately 50% contingency. 

0 An increase of one translator and a philosophy which dedicates 
translators to CPU's. 

0 The addition of two tape recorders. 

0 A redesigned custom I/O which incorporates most of the subsystem 

RAU functions and from which miscellaneous vehicle sensors (pressure, 
bridge networks, etc.) and relays are excited, 

0 Small standby batteries to power memory, clocks and reconfiguration 
switches in event of momentary loss of bus or regulated power 
supply. 

0 Recommendation to not use high order language for software 
programming. 

This computer configuration is similar to that proposed by IBM to MSFC for 
the Large Space Telescope (LST). Table 4-6 gives details of the HTC 
characteristics. 


4. 2. 5, 2 Computei^I/O Physical Characteristics 


packaging concepts for SEPS are as follows; 

1. No cable harnesses are used for reliability Improvement 
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Table 4-6. SUMC/HTC Characteristics 


Type: 

Organization: 

Storage: 

Capacity: 

Storage Cycle Time: 
Addressable Unit: 
Internal Data Flow: 
Instruction Set: 
Instruction Length: 
Data Word Length: 
Interrupt Facilities: 


General-Purpose, Stored Program, Parallel 

Fixed Point, Binarys Integer 

Monolithic Random Access: 650 NS (N-MOS) 

Interface 

65,536 bytes with density 8K X 16-bits 
650 NS 
8-bit byte 
16“bit Parallel 

86 Fixed Point Standard S/360 Instructions 
16/32/48 bits 
16/32/64 bits 

Single hardware with multilevel capability 
through hardware and software mechanization 


Typical Execution Times: 
Instructions: 

Add (Register to Register) 
Add (Register to Storage) 
Multiply (32 x 32 Operand) 
Average Processing Rate 


16-Bit Data Flow CPU 

2.0 li S 
3.2 y S 

28.0 y S 
250 KOPS 


' Features : 


( S/360 Problem State Compatible 
Input/Output 

Externally Initiated - Direct Memory Access 
1 Buffered I/O 

I Program Initiated - Direct I/O, External 
I Interrupts 

I Storage Protect - Block, 512 Words 

V Parity - Byte 


and low cost. ATT interconnections are via multi-layer 
interconnection boards. 

2. Pluggable assemblies are used for ease of in-process test- 
ing and repair. 

3. Maximum use is made of LSI (consistent with technology) 
for minimum weight and increased reliability. 

4. Multi-chip hybrid packaging of LSI logic is used to in- 
crease circuit density. 

Modular Packaging Design Considerations 

The SEPS packaging concept includes modular sub-assemblies using flex- 
ible printed wiring circuitry for electrical interconnections along with the 
multi-layer interconnection board (MIB). The sub-assemblies containing elec- 
trical components mounted on the MIBs are self-contained modules as illustrated 
in Figure 4-23. The unit assembly will be composed of the required modules 
electrically plugged into the backpanel and mechanically attached to the side 
rails of the structure as shown in Figure 4-24. 

Page type and thickness vary and depend upon the style and type of 
electrical components' used. Also, page thickness varies because of the number 
of interfacing lines between MIBs and backpanel necessary to make them self 
contained. The pages consist of two MIBs bonded to each side of an aluminum 









heat transfer frame. Two 120 pin connectors are attached to the upper edge 
of the MIB to provide a pluggable interface with the motherboard/ backpaiiel 
assembly. The page frame side surfaces are mechanically attached to the side 
rails which comprise the side of the unit assembly structure and also act as 
the heat transfer interface between the page, unit assembly and the heat 
transfer medium. The mounting feet on the end of the structure and the side 
rails are the heat transfer interface (bottom cover heat sink). The main 
frame of the unit structure is U-shaped and has mechanically attachable side 
rails and covers for ease of assembly and accessibility. 

Special circuits are contained in modules and utilize hybrid technology. 
Each circuit is a mix of monolithic chips and thick film components. Special 
circuits are of various sizes with 1“ x 1" being the most common. Logic chips 
are also packaged in hybrid submodules, typically 5 or 6 chips per container. 
Figure 4-25 illustrates i:he multi-chip packaging concept. Memory chips, because 
of a uniform and relatively small interconnection, are packaged more densely. 

The hybrid power supply components are attached to a frame and make elec- 
trical interconnect with a printed wiring board using solder lands. The sub- 
assembly is pluggable to the backpanel and is attached to the side rails of 
the frame. External connectors are provided for prime power input. 

External interface circuits are connected through high density circular 
connectors which have printed wiring board solder tails on the end of rear 
removable pins. These connectors interface directly with the motherboard and 
are fastened to the U-shaped main frame* 





















A summEiry of 


Computey^I/0 packaging 


charactenstics t 


Size (L X W X H) 

Volume 

Weight 

Total No. of Pluggable Pages 
No. Power Supplies 


25.5x56x14 cm 
0.02 tn^ 
16.5 Kg 

n 


presented ’below 
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REDUNDANCY MANAGEMENT AND 

RELIABILITY ANALYSIS 5 

5.1 GENERAL 

Since the last study was performed (Reference: 2) some basic groundrule 
changes occurred which had significant impacts on the CCS reTiability and 
redundancy management. These were: 

(1) CCS reliability goal was changed from 0.9703 to 0.9500 for a 
three-year unmaintained mission. 

(2) Dual redundant tape recorders are a part of the CCS. Tape recorder 
reliability Is 0.99981 for dual tape recorders for a three-year 
mission lifetime (Reference 11). 

(3) CCS shall be capable of storing 4K of 16-bit words of telemetry 
data and periodically transmitting this data either to tape recorders 
or to the communications subsystem. 

In order to accommodate these changes, a reliability and redundancy 
management analysis was performed. Major inputs to this analysis were the 
results of trade studies and analyses which were performed and are documented 
in other sections of this report. These are: 

(1) Utilize a Hybrid Technology Computer (HTC) with a 16-bit data flow* 
NMOS memory technology, and bi-polar CPU logic design (Reference 
Sections 4.2.1 and 4.2.2). 

(2) Incorporate the data acquisition function of data conversion, for- 
matting, and code/decoding into the CCS with the exception of two 
subsystem interfaces: solar array and propulsion subsystems 
(Reference Section 4,2,3 .2,1). 

5-1 


(3) Incorporate the 4K"Word telemetry buffer Into main memory 
(Reference Section 4.2.5). 

(4) Memory size requirements, including contingency and the 4K-word 
telemetry data storage requirement, is 24K of 16-bit words (Reference 
Section 3.2.1). 

For this study all CCS component failure rates were refined. A much 
better extimate of failure rates was possible with the current CCS configu- 
ration because they are predicated to a large extent on hardware that has been 
delivered. The HTC has been delivered to MSFC, the translator design is 
approximately 90 % developed, and the fault tolerant memory breadboard is being 
fabricated. This permits a much more accurate prediction of failure rates 
and piece-part counts than was possible in the previous study. The failure 
rates assume high reliability parts procurement and fabrication programs and 
extensive component burn-in and screening. 

5.2 COMPUTER 

5.2..1 MAIN MEMORY 

The organization, operation, and redundancy management techniques of the 
fault tolerant memory was not changed from that presented in the previous study. 
The memory size was Increased to 24K of 16-bit words, however, and the switching 
Cl rcui try between tht' memory and CPU/transl ator was simpl i fi ed by changing the 
way spare bit planes are used. Now spare bit planes are switched as specific 
replacements for failed memory planes thus leaving uneffected all the other 
memory planes containing no errors. (For additional explanation see Section 
4 . 2 . 2 . 2 )', ■■ 
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Early in the study an analysis was performed to relate memory reliability 
with memory size and with the number of memory faults to be accommodated. This 
was necessary input into the trade study concerning the location of the 4K word 
telemetry buffer (Reference Section 4.2.5). Figure 5--1 summarizes this data. 

For memory sizes greater than 16K, a five fault tolerant memory is required. 

Because of the inherent nature of the fault tolerant memory design, the 
on/off failure rate ratio was assumed to be one, since all segments of memory 
are potentially required at any time. Coverage was assumed to be 0.99. 

5.2.2 CPU/TRANSUTOR 

Trade data was developed to assist in the performance of the trade study 
documented in Section 4.2. 2.2 to determine the baseline SEPS CPU. Table 5-1 
summarizes this data. Even though the reliability '^f the selected configuration 
was the lowest of the candidate concepts, it ms adequate to meet the overall 
CCS reliability goal . 

The CPU redundancy management scheme of having 3 CPUs with one operating 
and 2 spares was retained. Fault detection continues to be implemented by 
GPU self-tests and GO/NO-GO counters. A current study underway for MSFC 
indicates the addition of microcode storage parity checks will be necessary to 
achieve the assumed CPU coverage of 0.99. . However, this is a small impact on 
the design. An on/off failure rate ratio of 4 Was. used. 


RELIABILITY 









Table 5-1 . Summary CPU Trade Data 


CPU 

Configuration 

Instruction 

Set 

Failures 
X TO"® Hrs. 

3 Year 
Reliability 

Comment 

8-Bit Data Flow 
TTL-LSI 

TC-2 (47) 

2.82 

0.99914 

Previous 

Baseline 

8~Bit Data Flow 

S/360 (80) 

4.20 

0.99851 

Candidate 

TTL-LSI 





8- Bit Data Ffov/ 

S/360 (80) 

2.59 

0.99922 

Candidate 

N-HOS - LSI 
16-Bit Data Flow 
TTL-LSI 

S/360 (86) 

5.56 

1 

0.99769 

New 

Basel ine 


A change was made in the number of translators from that baselined in 
the previous study. It was determined that significant CPU/translator 
switching circuitry could be saved by having three translators, one dedicated 
to each CPU, 

5.2.3 CLOCK 

■ The clocks and associated oscillators are physically part of the power 
supplies. However, as discussed in paragraph 4.2. 2. 3, the clocks cannot be 
poWered-down at any time because of the necessity to maintain memory cycling 

* ■ . k , 

in failure recovery strategies. Therefore, the clocks are triple-modular- 
redundant (TMR) with one spare off as proposed in the previous study. ; 
Coverage and the on/off failure rate ratio were assumed to be 0*99 and 
■respectively..- 



5.2.4 POWER SUPPLY 


ii 
:i 

i! 

li 
I 

• Is 

Similar to the previous study, three hybrid power supplies are necessary I 

i 

to meet the reliability goal for SEPS and to achieve a balance of allocated ^ 

i 

reliability within the CCS, Only one supply is powered-on at a time, Detec- i 

tion and reconfiguration is achieved by measurement of over and undervoltage I 

and overcurrent. Simple diode isolation of supply voltages probably can be ] 

achieved with adequate regulation. Coverage and on/off failure rate ratio I 

were assumed to be 0,99 and 4, respectively. j 

1 

i 

5.2.5 RECONFIGURATION SWITCHING j 

j 

The logical methods of reconfiguration presented in the previous study i 

I 

were re-examined and found to be adequate. However, packaging of these | 

'i 

switches vms not. Accordingly, this study treated the subject and allocated j 

i 

a conservative unreliability estimate to the many redundant switches which j 

achieve the crosstrapping of functional elements (i.e., memory to 3 CPU's | 

;i 

and 3 CPU's to 2 custom I/O's}. The major factor in the design is the number | 

of interconnections versus the number of gates required for switching. MSI I 

flatpack technology yields the highest number of available leads/gate while j 

LSI chip technology yields the greater number of gates/lead, A detailed | 

i 9 

? 

design was not possible within the scope of this contract; therefore, only 
an approximation of a failure rate could be accomplished. The reconfiguration 
switches were assumed to be a combination of MSI flatpacks and LSI chips-, 
operating as TMR with a powered -off spare. Coverage and on/off failure rate 
ratio were assumed to be 0.99 and 1, respectively. 

5.2.6 RECONFIGURATION CONTROL UN IT/ SWITCH -OVER DETECTOR UNIT 
The unit which oletects failures (except in memory) and directs subsequent 

actions is the reconfiguration control unit/switch'-over detector unit* It 
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contains the status registers for all spares, receives the various fault 

.... ► 

detection signals (CPU, I/O, Power Supply), and issues commands to the 
reconfiguration switches upon detection of a fault. Reconfiguration may be 
commanded from the ground via the custom I/O thus bypassing the CPU, Also 
contained in thin unit is a GO/NO-GO window timer which must be reset during 
a preset time gate, or else a backup CPU or custom I/O will be switched in. 
Since this unit must be highly reliable and possess masking redundancy, a 
TMR/sparing technique is again proposed like the previous study. Coverage and 
on/off failure rate ratio ware assumed to be 0.99 and 1, respectively. 

5,2.7 TAPE RECORDER 

A reliability of 0.99981 for the dual -redundant tape recorders (one 
operating and one powered-off) was groundruled for this study (Reference 11). 

5.3 CUSTOM I/O 

The custom I/O is primarily dual redundant with TMR logic for critical 
circuits such as the command interface logic and interrupt logic. One-half 
of the redundant I/O and the TMR logic is operating and the other one-half 
is powered-off. Error detection is provided by a BITE register, parity 
checks and feedback wrap tests. Fault detection will result in the genera- 
tion of an interrupt to the CPU to automatiGally switch to the spare I/O 
section. Reference Section 4,2.3 for more detail on the redundant design 
aspects of the custom I/O. Coverage andon/pff failure rate ratio were assumed 
to be 0.99 and 4, respectively. 

5.4 TOTAL CCS 

Figure 5-2 is a summary block diagram showing component failure rates, 
component redundancy. levels and component reliability for a SEPS three-year, 
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unmalntained mission. Total CCS reliability is calculated to be 0,95039, 
which exceeds the CCS reliability goal of 0.95000. Additionally, it should 
be noted that the above reliability estimate includes the unreliability con- 
tributed by equipment performing (1) telemetry formatting, storage and 
recording functions and (2) the bulk of data acquisition, formatting, and 
conditioning for the other SEPS subsystems. 

Table 5-2 summarizes the CCS component redundancy characteristics. 


Table 5-2. CCS Component Redundancy Characteristics 


Component 

Redundancy Characteristics 

Main Memory 

5 Fault Tolerant (4 spare bit planes) 

Translator 

1 Active, 2 Spares Off (Corrects 1 memory failure) 

GPU 

1 Active, 2 Spares Off 

Power Supplies 

1 Active, 2 Spares Off (With battery backup) 

Clock 

THR + 1 Spare Off (Masking Redundancy) 

Reconfiguration 

Switches 

THR + 1 Spare Off (Masking Redundancy) 

Reconfiguration 
Control Unit 

TMR (Masking Redundancy) 

Custom I/O 

1 Active, 1 Spare Off (Selected Circuits are TMR) 

Tape Recorder 

1 Active, 1 Spare Off 


// 
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APPENDIX A 

SEPS CGS DETAILED INTERFACE REQUIREMENTS 


Appendix A - 

Source: 

Destination: 

Type: 


Class: 


No, of Wires 

Impedance; 

Voltage; 
liesolutlon: 
No. of Words 

Sampling or 
Update Rate; 

GND/CCS 

Logic: 


Signal List Definitions: 

Where signal originates 
Destination of signal 
Typically one of following: 

Discrete (DIS) 

Analog (ANA) 

Digital (DIG) 

Typically one of the following: 

a. Critical Command (Cr Cmd) 

b. Noncritical Command (N Cmd) 

c. TM data measurement (TM) 

d. Control data measurement (Control) 

The number of signal wires coming into I/O or exiting from 
I/O 

The impedance that must be driven by the I/O circuits or the 
source impedance of signals to be measured by I/O 
Nominal voltage levels (or range) of outputs and inputs. 
Resolution of digital or analog input/output signals. 

Where a signal contains multiple words, this column Indicates 
the quantity. 

Self Explanatory. 

indicates if onboard logic exists to initiate the command or if 
It is a ground command only, A ^'CCS" indication in this column 
does not preclude it also being initiated from the ground. 




Guitlance, Navigation and CoritroT Signal Interface List (CCS Outputs) 


Signal: Harne/Symbol 

Gyro 11 Enable/Disable 
Gyro Enabl e/pi sable 

Gyro |3 Enable/Dtsable 
Sun Sensor #1 Enable/pisable ^ 

Sun Sensor §Z Enable/Dtsable 
Sun Sensor |3 Enable/Ci sable 

Star Tracker II EnabTe/Disable 

:Star Tracker S2 Enab1e/Pl sable 

Acs Elec Ehable/Disable 
Acs Mode Control 

Igri Thruster T Pitch Gimbal ■ 
Ion Thruster 2 Pitch Gimbal 

Ion Thruster 3 Pitch Gimbal 
Ton Thruster 4 Pitch Gimbal 

Ion Thruster 5 Pitch Gimbal 
Ion Thruster 6 Pitch Gimbal 

Ion Thruster 7 Pitch Gimbal 
Ion Thruster 8 Pitch Gimbal 

Ion Thruster 9 Pitch Gimbal 
ion Thruster 10 Pitch Gimbal 

Ion Thruster 1 Yaw Gimbal 
Ion Thruster 2 Yaw Gimbal 

ion Thruster 3 Yaw Gimbal 
Ion Thruster 4 Yaw Gimbal 

Ion Thruster 5 Yaw Gimbal 
Ion Thruster 5 Yaw Gimbal 

' Ion Thruster 7 Yaw GitiibaT 
Ion Thruster 8 Yaw Gimbal 

Ion Thruster 9 Yaw Gimbal 
Ion Thruster 10 Yaw Gimbal 


Source 

Dest. 

Type 

Class 

CCS 

Gyro 

DIS 

Cr Comd 

It 

II 

It' , . 

II 

II 

II 

'll 

11 

It 

Sun Sensor 

It 

tl 

It 

11 ■ . . 

If 

M 

It 

tl 

II 

II 

It 

: Star 

II 

ir 


Tracker 


* - 

11 

II 

II 

It 

11 

ACS Elec 

n 

It 

tl 

It 

DIS (7) 

II * 

II 

tl 

DIG 

11 

M 

11 

II 

Ji 

ti- 

It 

It 

II 

ll 

M 

II 

.11 

II 

II 

11 

II 

It 

It 

It 

II 

n 

II 

li 

It 

It 

ir 

n 

It. 

11 

u 

11 

tl 

1} 

It 

11 

11 

n 

)l 

It 

II 

ti 

11 

II 

ir 

It 

H 

11 

M 

It 

It 

II 

II 

It 

II 

.11. 

II 

ft 

II 


It 

» 

II 

If 

11 

11 

It 

II 

]| 

11 

11 

» 

li 

11 

n 

II 

« 









Sampling 

j — 

No. 




Ko. 

or 

1 

of 



Resolu-^ 

of 

Update 

GKD/CCS j 

Wires 

Imped. 

Voltage 

tion 

Words 

Rate 

Logic j 

One 

TBD 

28V 

Hft 

m 

As Req*d 

CCS .. i 

11 

n 

11 



ii 

It • • ! 

1 

H 

II 

11 


ii 

11 

.'it - ' i 

li 

tl 

II 

i1 

It 

-II 

- i 

u 

II 

M 


It 

tl 

ii 

(1 1 

II 

II 

11 




*' ■ 1 

11 

11 

tl 


II 

11 

n 1 

II 

It 

tl 

It 


' II 

" ' ' 1 

It 

II 

It 

II 


>! 

GND ■ 1 

Seven 

II 

II 



11 

CCS . ■ i 

TED 

tl 

TBD 

0,35;^ 

One 

II 

'•> I- * 

tl 

tl 

It 

11 

U 

It 

■i ■ 

11 

ii 

11 

n 

11 

II 

tf 

It 
- 11 

M i ■ 

M 

It: 

11 


11 

*11 


It 

II 

ri 


It 

II ■ 

» 1 

It 

li 

1? 

II 

It 

II 


11 

it 

II 

II 

It 

II - 

11 • 

It 

It 

II 

II 

II 

- 11 

I. 

;i 

It 

It 


11 

li 

p 

11 

11 

It 


II 

■1 

•' ■ 

11 

H 

II 

11 


It 


K 

It 

II 

TI 

u 

11 

It ' . 

II 

h 

11 

II 

|r 

n 

** ■. ^ 

11 

II 

H 



u 

i( ' ■ 

It 

II 

n 


It 

H 

11 . .f 

II 

If 

n 


II 

It 

ii i ■ 

It 

It 

II 

II 

II 

II 

M . ^ 

11 

It 

w 



11 

tl 

11 

II 

It 

II 

11 

ii 



a 




£E3 ra. 


CUD 


CZn CZ-l t-u 


4 ar- i .nfcts i 


signal Interface List 






















Sampling 







Ho. 




Ho. 

or 







of 



Resolu- 

of 

Update 

GHD/CCS 

Signal Hair.e/Symbol / 

Source 

Dest. 

Type 

Cl ass 

Hires 

Imped. 

Voltage 

tion 

Words 

Rate 

logic 

RCS Thruster 1 On/Off 

CCS, ' 

RCS 

nis 

Cr Comd 

One 

TBD 

TBD 

HA 

HA 

1/Sec 

CCS 



Thruster 











M 

It 

II 

0 

n 

II 

H 

It 

II 

11 

II 


n 

It 


li 

t1 

11 

M 

II 

It 

a 

li 


II 

It 

«• 

It 

11 

H 

11 

11 

It 

a 

Pi 


M 

It 

♦ 

11 

II 

II 

II 

11 

It 

II 

II 

RCS Thruster 1*6 On/Off 

li 

11 

II 

II 

11 

II 

« 

It 

It' 

a 

IP 

*RCS Thruster 17 On/Off 

II 

11 

» 

'll 

11 

11 

11 

11 

it 

It 

II 

11 

11 

n 

It 

II 

II 

II 

i| 

II 

II 


11 

11 

*' 

II 

11 

11 

il 

It 

IP 

It 

11 


II 

II 

« 

II 

II 

11 

It 

tl 

II 

It 

a 


li 

ii 


II 

11 

II 

IP 

II 

II 

a 

a 

*RCS Thruster 26 On/Off 

n 

II 

It 

ti 

It 

II 

It 

II 

II 

It 

a 

RCS Thruster 1 Heater On/ Off** 

n 

ir 

II 

It 

II 

II 

II 

II 

n 

II 

II 

11 

II 

a 

a 

a 

11 

1/Min 

IT 

a 

a 


It 

II 


11 

u 

II 

It 

a 

It 

a 

II 


u 

a 


11 

II 

» 

II 

II 

» 

It 

H 


It 

M 

[ ^ 

ii. 

PI 

11 

11 

a 

a 

u 

a 

RCS Thruster 16 Heater Oh/Off 


(1 

H 

ii 

it 

It 

It 

a 

tl 

II 

It 

*RCS Thruster 17 Heater on/off : 

II 

11 

II 

n 

II 

\\ 

11 

11 

II 

11 

II 

ri 

a 

H 

11 

It 

11 

a 

It 

II 


li 

It 


11 

11 

11 

11 

a 

II 

a 

M 


11 

II 

* . 

It 

11 

II 

It 

It 

II 

ji 

ft 


II 

It 


II 

II 

IP 

It 

It 

*n 

II 

It 

*RCS Thruster 26 Heater :On/Off 

li 

II 

II 

» 

M 

II 

II 

It 

II 

II- 

II 

RCS Hydrazine Isolation Valve X 

II 

Val ve 

DIS 

Cr Comd 

one 

II 

It 

II 

II 

1/10 Sec' 

II 

Open/Close : 












RCS Hydrazine Isolation ValVe 2 

1* 

Valve 

DIS 

II 

One 

M 

II 

pi 

a 


11 

Ppen/ClosQ 












***RC3 Krypton Isolation Valve 1 

II 

II 

II 

H 

II 

11 

II 

a 

II 

IP 

Ip 

Open/Close 












***RCS Krypton Isolation Valve 2 

*' 

tt [ 

II 

l| 

il. 

M 

it 

a 

II 

|p 

II 

Open/Close 

RCS Hydrazine Liiie 1 Heater 

II 

Heater 

II 


It 

IP 

II 

1* 


As Req'd 

. GHD 

On/Off 












*RCS Hydrazine Line 2 Heater 

ii 

■ 11 ^ 

II 

« 

tl 

11 

II 

■ 

a 

As Req'd 

ll 


: On/gff 


*Earth Orbital Missions Only ^ 

**PHcr ti) firing RCS thrusters* temp is monitored for low threshold limit 
i^-*Planetary. missions onlj'j mission dependent 


Signal ‘Interface List 


Signal Name/Symbol : Source ■ Dest. Type Class . 

*** RCS Krypton Line 1 Heater On/Off CCS Heater DIS Cr Cbrad 

*** RCS Krypton Lire 2 Heater. On/Off " " " " 

* CCS ***AGS TO BE SUPPLIED 

: ■ CCS *Laser Radar " " " 

** CCS *TV II H u 

; ■ ‘ CCS *FlDOdlights " “ 

,, *Penlites « « n 

TOTALS DIG 


Planetary 20 

Earth Orbital 20 


. *Earth Oi'bital Mssions only : 

. ;i^!**planetary missions only j mission dependent 




No. 

of 

Wires 

Imped. 

Voltage 

Resolu- 

tion 

No. 

of 

Words 

Sampling 

or 

Update 

Rate 

GNO/CCS 

Logic 

One 

II 

TBO 

it 

TBD 

It 

HA 

II 

NA 

11 

As Req'd 

it 

GND 

II 


ESTIMATE 15 DISCRETES 

DIS ANALOG 
58 ' 0 

84 0 





Guidance, Navigation and 
Signal' Name/Syjnb, pi 

Control Signal Interface List (CCS Inputs) 

■ Sourpe ■ Best, type * 

Glass . 

No. 

of 

Wires 

Imped, 

Voltage 

Resolu- 

tion 

No. 

of 

Words 

Sampling 
■ or 

Update 

Rate 

GND/CCS 

logic 

Gj'i’o #! On/Off 

Gyro 

CCS 

DIS 

Control 

One 

560 n 

5V 

NA 

NA 

As Req'd 

WA 

Gvro #2 Oti/Off : 

M 

11 


II 

It 

II 

fl 

11 

II 

11 

It 

Gyro f 3- On/Off : : 

II 

' II 

II 

II 

II 

It 

II 

It 

n 

Ii 

» 

Gyro #1 Rotor Speed 

H 

II 

A 

Control 

Two 

II 

D-5V 

IX 

It 

1/Hin 

II 

Gyro #2 Rotor Speed 

n 

11 

A 

(RH) 

II 

It 

ir 

II 

II 

If 

tl 

11 

Gyro ^3 Rotop Speed 


II 

A 

l< 

II 

Tt 

It 

tl 

II 

ii 

It 

Gyro #1 Temp 

II 

11 

A' 

K 

It 

II 

II 

0.5X 

It 

11 

II 

Gyro |2; Temp 

11 

II 

A 

II 

It * 

‘ It 

11 

It 

II 

Ji 

** 

Gyro #3 Temp 

M 

II 

A 

l| 

II 

It 

tl 

It 

II 

tl 

tr 

Gyro |I Rate Gimbal A 

, W 

11 

A 

Control 

It 

n 

TBD 

It 

II 

1/Sec 

H 

Gyro #! Rate GimbaT B 

11 

11 

A 

II 

It 

It 

11 

It 

II 

11 

H 

Gyro #2 Rate Ginibal A 

■ ,M 

11 

A 

II 

11 

It 

II 

11 

It 

■ tl. 

» 

Gyro jf2 Rate Ginibal B 

11 

II 

A 

II 

II 

It 

M 

u 

II 

II 

Jl 

Gyro #3 Rate Gimbal A 

*1 ' 

II 

A 

II 

It 

It 

tl 

It 

II 

II 

II 

Gyro Rate Ginibal B 

11 

11 

A 

II 

« 

ti 

It 

II 

11 

It- 

Tl 

sun S’aiisor 1 Output A 

Sun 

II 

DIG 

It 

TBD 

II 

TBD 

0.4X 

» 

It 

Jl 

Sun Senspp 1 Output S 

Sonsor 

Ml 

11 

H 

11 

It 

11 

11 

Cl 

II 

It , 

- 

Sun Sonsor 2 Output 'A 

II 

« 

i) 

tl 

II 

i| 

It 

II 

11 

n 

II 

Sun Sensor 2 Output B 

II 

II 

II 

II 

II 

It 

11 

» 

It 

It 

II 

sun Seiisor 3 Output A 

ii 

* 

It 

II 

II 

11 

M 

11 

tl 

It 

It 

II 

Sun Seiisor 3 Output B 


II 

II 

M 

It 

t1 

11 

tl 

11 

Ii 

U 

Sun Sensor \ Oii/Off 

-.11 

It 

DIS 

TH 

One 

It 

5V 

KA 

ir 

VMfn 

It 

Sun Sensor 2 0n:/0ff , 

II 

It 

It 

ft 

II 

II 

II 

II 

II 

tl 

« 

Sun Sensor 3 On/Qff 


n 

It 

II 

ii 

It 

H 

II 

It 

It 

11 

Sun Sensor T Temp 

' -'ll 


^ A ■ 

TH 

Two 

It 

0-5V 

IX 

II 

1/Kin 

w 

Sun Sensor 2 Temp 

u 

» 

A 

ir 

II 

It 

II 

It 

11 

n 

ti 

Sun Sensor 3 Temp 


,11 

A: 

n 

II 

It 

It 

It 

It 

It 



(RH) = Redundancy Management 


S^g^at Interface List; 


Signal Name/SiinboT : 

Source . 

Dest. 

Type 

Class 

Star Tracjiier T Star Magnitude 

Star 

CCS 

DIG 

Control 


Tracker 




Star Tracker 2 Star Magnitude 

It 

U 

II 

It 

Star Tracker 1 Angle A 


II 

« 

11 

Star Tracker 1 Angle S . ' 

l( 

II 

11 

It 

Star Tracker 2 Angle A 

It 

JI 

tt 

It 

Star Tt'acker 2 Angle B 

>t 

It 

n 

II 

Star Tracker 1 Temp 

II 

It 

A 

TH 

Star Tracker. 2 Temp 

II 

It 

A 

U 

Star Tracker 1 On/Qff 

11 

II 

DIS 

Control 

star Tracker 2 On/Off 


11 

It 

’ll 

Ion Thruster. 1 Pitch Gitrbal ' 

Actuator 

II 

A 

Control 


t1 

II 

' 

* 

II 

. 

II 

II 

• 

II 


II 

tt 

• 

tl 

t - ^ » 

n 

II 

« 

11 


It 

II 


It 

Ion Thruster 10 Pitch Gimbal 

11 

II 

is 

II 

Tpn Thruster 1 Yaw Gimbal 

Ji 

II 

1) 

It 

A^ 

11 

It 


It 

II 


11 


ii 

11 

• 

11 


N 

11 

, « 

M 

Ion Thruster 10 Yaw Gimbal 

II 

II 

A** 

II 

RCS Thruster Valve 1 Status 

Valve 

tl 

DIS 

1| 


11 

II 


U 


11 

II 


tt 

» ' 

11 

II 

' ■ 

It 

Ik 

ii 

11 

• 

tl 

RCS Thruster Valve 16 Status 

■JI 

11 

II 

11 

*;Rcs Thruster Valve 17 status 

ii 

II 

It 

ll 

* 

11 

II 

» 

II 

*; ■ : ■■■ ■ , 

11 

It ' : 


It 

.*■ . , 

It 

11 

4* 

It 


It 

It 

• ' 

ii 

RCS Thrust.et* Valve 26 Status 

It 

n 

Ii 

II 

^Earth Orbital Missions only. 






iiHWJ- 



No. 

of 



Resolu- 

No. 

of 

Sampling 

or 

Update 

GND/CCS 

Wires 

Imped. 

Voltage 

tion 

Words 

Rate 

Logic 

TBD 

560 n 

TBD 

m 

TBD 

lysec 

NA 

II 

a 

tl 

11 

a 

>' 

li 

|l 

a 

a 

0.122 

11 

■t 

a 

II 

u 

II 

II 

It 

II 

a 

11 

a . 

11 

11 

a 

a 

a 

It 

It* 

(1 

11 

II 

II 

II 

T>fo 

560 n 

o-sv 

12 

NA; 

VHin 

a ■ 


• ii 

11 

a 

ll 

11 

a 

One 

a 

TBD 

NA 

II 

l/Hin 

II 

H 

tl 

11 

II 

II 

a 

II 

Two 

TBD 

11 

0.352 

NA 

1/10 Sec 

It 

tl 

M 

a 

II 

a 

a 

It 

it 

a 

11 

II 

a 

ri 

it 

It 

pi 

11 

II 

a 

II 

It 

II 

It 

It 

tl 

tl 

It 

a 

II 

It 

a 

II 

a 

It 

It 

]l 

a 

It 

a 

a 

a 

it 

tl 

11 

11 


11 

a 

M 

11 

11 

a 

II 

M 

II 

a 

ri 

a 

a 

11 

Cl 

a . 

a 

II 

tl 

II 

a 

It 

11 

It 

II 

M 

It 

II 

a 

II 

a 

It. 

It 

II 

a 

a 

a 

It 

One 

TBO 

It 

tIA 

a 

1/10 Sec 

II 

II 

It 

a 

11 

M 

a 

a 

It 

It 

It 

II 

It 

a 

li 

ii 

II 

11 

11 

a 

II 

JJ 

tl 

ii 

II 

H 

II 

II 

ll 

11 

II 

a 

II 

It 

II 

It 

It 

It 

11 

It 

11 

II 

li- 

n 

II 

ll 

It 

a 

II 

lt 

11 

ll 

a 

II 

M 

a 

tl 

11 

a 

tl 

a 

ij 


a 

11 

II 

a 

a 

h 

JI 

it ' 

ii 

It 

. It 

11 

a 

It 

JI 





Signal Interface List 










Sampling 







No. 




No. 

or 







of 



Resolu- 

of 

Update 

GND/CCS 

Signal Name/Syriibol 

Source . 

Dest. 

Type 

Class 

Wires 

Imped. 

Voltage 

tion 

Words 

Rate 

Logic 

RCS Thruster 1 Temp 

Thruster 

Ij 

CCS 

]J 

A 

Control 

Jl 

Two 

tl 

TBD 

II 

TBD 

II 

356 

tl 

NA 

II 

1/Hin 

11 

NA 

tl 


il 

II 

« 

II 

II 

M 

H 

tl 

II 

II 

it 


n 

II 

• 

» 

II 

II 

II 

tl 

II 

11 

IT 


it 

(1 

• 

II 

11 

II 

11 

It 

11 

» 

It 

• 

RCS Thruster 16 Temp 

11 

II 

' • 

Tl 

II 

1^ 

II 

II 

It 

It 

11 

11 

IE 

n 

II 

II 

11 

It 

tl 

11 

RCS Thruster 17 Temp 

II 

IJ 

II 

It 

tl 

II 

II 

n 

tl 

11 

11 

It 

II 


II 

11 

« 

II 

11 


11 

II 

tl 

II 

tl 


II 

II 

• 

II 

U 

II 

II 

II 

11 

11 

tl 


It 

II 

• 

n 

ir ^ 

ti 

tl 

II 

It 

11 

II 

RCS Thruster 26 Temp 
RCS thruster 1 Pressure ■ 

It 

II 

t! 

II 

Ij 

• 

II 

II 

n 

TH 

It 

It 

kr 

11 

11 

It 

It 

11 

II 

It 

It 

5% 

It 

II 

It 

a 

tl 

1/Sec 

It 

It 

It 

It 

• 

II 

II 

• 

11 

tl 

11 

11 

11 

M 

11 

11 

* 

II 

If 

• 

11 

II 

II 

11 

11 

It 

11 

U 

«' 

II 

II 

* 

11 

M 

II 

tl 

II 

It 

It 

l( 

* 

RCS Thruster 16 Pressure 

II 

11 

• 

11 

II 

M 

il 

11 

11 

«: 

II 

II 

II 

It 

11 

11 

n 

t* 

il 

11 

RCS Thruster 17 Pressure 

It 

II 

11 

II 

II 

i* 

Ik 

It 

11 

11 

ir 

II 


M 

II 


II 

|i 

it 

11 

11 

tl 

II 

>1 

» ■ 

II 

II 


II 

M 

M 

11 

11 

•It 

11 

11 


» 

II 


Ik 


11 

II 

11 

It 

11 

II 

RCS Thruster 26 Pressure 

li 

II 

It 

M 

M 

11 

tl 

n 

Jt 

11 

It 






Signali^Interface List 


Signal Narae/Symbol 


Source. 


RCS Hydrazine Isolation Val*‘e 1 
Status 

RCS Hydrazine Isolation Valve 2 
Status : 

RCS Krypton Isolation Valve 1 
Status ■ 

RCS Krypton Isolation Valve 2 
Status 

RCS Hydrazfe Tank 1 Press 
RCS Hydrazine Tank 2 Press 
RCS Hydrazine Tank 1 Temp 
RCS Hydrazine Tank 2 Temp 
RCS Hydrazine Manifold Press 
RCS Krypton Tank Press 
RCS Krypton Tank Temp 
RCS Krypton Hanifcld '^ress 
RCS HydraZi ne Line 1 Temp 
RCS Hydrazine Line 2 Temp 
RCS Krypton Line T Temp 
RCS Krypton Line 2 Temp 


Manifold 

Tank 

11 

Manifold 

Line 


**AGS 

♦Laser 

Radar 

♦TV 

♦Flood- ' 
lights 
♦Penlites 


TO BE SUPPLIED 


TOTALS 


Planetary 


Earth Orbital 


*Earth Orbital Missions only ' 
♦♦Planetary iniSsions qnlyt mission dependent 



Sampling 


Ko. 

of 

Wires 

Imped. 

Voltage 

Resolu- 

tion 

No. 

of 

Words 

or 

Update 

Rate 

GND/CCS 

Logic 

One 

TBD 

TBD 

HA 

NA 

1/10 Sec 

NA 

It 

M 

11 

tl 

It 

l> 

U 

It 

It 

• II 

II 

It 

II 

It 

If 

1i 

II 

n 

II 

It 

H 

Two 

560 n 

0-5V 

5^ 

» 

1/Sec 

It 

ir 

II 

II 

tl 

it 

11 

ft 

* 

II 

It 

11 

0.655 

It 

1/Min 

11 

It 

II 

tl 

11 

II 

tl 

11 

II 

It 

It 

5% 

]i 

1/Sec 

If 

11 

It 

II 

II 

II 

It 

M 

II 

M 

11 

0.6!S 

II 

1/Hin 

tt 

t: 

tl 

11 

556 

II 

1/Sec 

It 

ir 

tl 

11 

1 % 

II 

1/Hin 

11 

It 

It 

II 

It 

It 

11 

11 

It 

II 

tl 

it 

II 

W 

>■ 

it 

« 

II 

II 

II 

II 

11 


ESTIMATE 14 DIS 

12 ANALOG 


DIG 

DIS 

ANALOG 

12 

32 

86 

12 

46 

107 



[■ 


I, 

j 

i 














^ ^ 


Propulsion Subsystem Signal Interface List **CCCS Outputs) 


Signal Nains/SyniboT Source 

* Power Processor #1 Gontrol/Heas CCS 

* Power processor #2 Control /Heas " 

*■ Power Processor #3 Control/Meas- '' 

* Power Processor #4 CdntroT/Meas . “ 

* Power Processor .#5 Control /Heas " 

* Power Processor #6 Coiitrol/Heas ” 

* Power Processor #7 Cohtrol/Heas " 

* Power Processor SB Control/Heas " 

PC/TfirUster SV A1 t " 

PG/Thruster Sw A2 " 

;pc/Thruster Sw B1 

PC/Thruster Sw B2 " 

PC/Tfiruster: Sw Cl " • 

PC/Thruster Sw C2 " 

PC/Thruster :Sw D1 “ 

PC/Thrustef* Sw D2 " 

PC/Thruster SW El " 

PC/Thruster Sw E2 ” 

PC/Thruster Sw FI " 

PC/Thruster: Sw F2 " 

PC/Thruster Sw G1 " 

PC/Thruster;: Sw G2 ” 

PC/Thruster Sw HI '' 

PC/Thraster Sw H2 " 


Dest. 

Type 

Class 

Ko. 

of 

Wires 

Impet 

Pwr Cond 

DIG 

Gr Comd 

8 


M 

It 

II 

ti 

11 

il 

It 

11 

• Il 

tl 

II 

It 

11 

II 

II 

It 

II 

II 

It 

n 

II 

tl 

it 

11 

1! 

M 

II 

ti 

II 

H 

» 

II 

II 

It " 

tJ 

SW Matrix 

DIS 

II 

One 

II 

It 

It 

11 

)i 

11 

It 

ri 

M 

IE 

II 

il 

II 

II 

It 

II 

II 

II 

n 

II 

II 

II 

ir 

II 

tl 

II 

It 

II 

11 

!■ 

11 

It 

II 

i; , 

11 

II 

II 

11 

II 

It 

II 

II 

ri 

II 

tt 

It 

1) 

11 

rt 

M 

11 

11 

j|: 

li 

tl 

11 

II 

!r 

11 

11' 

11 

II 

11 . 

it 

II 

11 

*1 

H 

It 

II 

It 

II 

II 

M 

11 

11 


Voltage 

Resolu- 

tion 

Wo. 

of 

Words 

Sampling 

or 

Update 

Rate 

GND/CCS 

Logic 

**** 

***■ 

ic^rk'k'ir 

1/Ssc 

CCS 

n 

tl 

II 

It 

tl 

11 

II 

II 

It 

11 

u 

tl 

II 

It 

11 

II 

It 

II 

II 

Tl 

II 

II 

II 

■tl 

It 

ti 

(1 

II 

11 

11 

11 

II 

II 


H 

28V 

N'A 

NA 

TBO 

ir 

;i 

11 

II 

It 

It 

II 

. II 

II 

» 

It 

tl 

ir 

it 

M 

II 

II 

1- 

II 

II 

11 

11 

h 

II 

li 

It 

II 

tl 

U 

it 

li 

II 

11 

II 

11 

tl 

II 

ir 

> 

il 

II 

11 

II 

It 

it 

II - 

It 

11 

tl 

It 

11 

II 

II 

tl 

II 

II 

ti 

11 

II 

tl 

II 

11 

It 

11 

tl 

11 

II 

It 

It 

11 

11 

It 

II 

It 

» 

li 

11 


: *These signals include both. commands and measureinents, One each i twisted pair for clock, frame, and data in/out. 
**Assuines ;10 thrusters, 8 poWar conditioners, 2 Hg tanks. 

. ***CCS “h.PPlJ 7 bits (message data field bits 2-8) 

*• PPU -*• CCS 6 bits (data response field bits 19-24} 

V f***0pen collector TTL line driver 
*****24“bit word 


Signal Interface List 
Signai^Name/Symbol 

Source 

Dest. 

Type 

Class 

Ho. 

of 

Wires 

Imped, 

Voltage 

Resolu- 
. tion 

Ho. 

of 

Words 

Sampling 

or 

Update 

Rate 

GND/CCS 

Logitt 

Hg Tank Valve #1. Open 

CCS 

Valve Cont 

DIS 

Cr Cbfnd 

One 

TBD 

23V 

NA 

: m 

2/Day 

GND 

Hg Tank Va1 ve #T Cl ose 

• 11 

Module 

II 

11 

it 

ri 

11 

11 

11 

’ 11 

It 

It 

Hg Tank Valve Open ^ 

tl 

II 

11 

It 

It 

11 

11 

It 

II 

II 


Hg Tank Valve #2 Close 

' ii 

, H 

« 

II 

tl 

II 

II 

ll 

11 

II 


Thruster #1 Hg Valve Open ' 

it 


rr. 

It 

II 

11 

It 

Jl 

- » 

It 


Thruster #1 Hg Valve Close 

■ it 

If 

It 

11 


tl 

II 

tl 

11 

If 


Thruster #2 Hg Valve Open / 

: ii 

11 ' ■ . 

II 

M 

It ^ 

» 

11 

11 

It 


II 

Thruster #2 Hg Valve Close 

M 

11 

11 

II 

■11 

It 

II 

II 

11 

II 


Thruster #3 Hg Valve Open , 

tt 

IT ' 

n 


11 

11 

It 

•1 

II 

It 


Thruster #3 Hg Valve Close 

"u 

II 

H 

tl 

M 

Tl 

11 

11 

11 

It 


Thruster #4 Hg Valve t len 

II 

.11 

II 

tl 

It 

11 

M 

II 

. It 

II 


Thruster #4 Hg Valve Closer 

'(r 


M 

11 

11 

' 11 

11 

It 

11 

li 

II 

Thruster #5 Hg Valve Open 

it 

11 

II 

11 

M 

11 

11 

ll 

n 

If 

tl 

Thruster 15 Hg Valve Close 

11 

It 

II 

II 

ti 

H 

11 

It 

II 

11 


Thruster fS Hg Valve Open 

ii 

II 

II 

II 

11 

II 

II 

ll ' 

II 

II 


Thruster #5 Hg Valve Close 

.■-.■if' 

11 

II 

It 

11 

.11 

It 

II 

u 

It 

11 

Thruster §7 Hg Val ve Open 

II 

■ Pl ■ 

»r 

11 

II 

11 

n 

II 

11 

it . 


Thruster 47 Hg Valve Close 

tl 

II 

ii 

11 . . 

It 

II 

tl. 

11 

ll 

11 

11 

Thruster #8 Hg VMve Open 

n 

II 

II 

II 

tl 

It 

It 

ll 

II 

ti 


Thruster #8 Hg Valve Close 

11 

n 

H 

u 

M 

11 

II 

It 


(1 


Thruster IS Hg Valve Open 

11 

II 

II 

II 

>1 

ti 

11 

tl 

11 

It 

U 

Thruster Hg Val ve Cl ose 

II 

ft 

II 

tl 

It 

II.' 

u 


It 

II 


Thruster #10 Hg Valve Open 

11 

11 

» 

It 

II 

11 

■1 


11 

II 


Thruster j|0 Hg Val Ve Close 

tt 

11 

II 

tl 

»r 

II 


.11 

II 

1! 



signal Interface List 





No. 

of 

• 


Resolu- 

No. 

of 

Sampling 

or 

Update 

GNO/CCS 

Signal : Name/.Symbol 

Source ’ 

Dest. 

Type 

Class 

Wires 

Imped. 

Voltage 

tion 

Words 

Rate 

Logic 

Hg :Feedl ine: Heater #T On/Off 

CCS 

Heater 

DIS 

Cr Comd 

One 

•TBD 

28V 

NA 

NA 

2/Day 

GND 

Hg Feedline Heater iZ Qn/Off 






^1 


II 


II 

II 

Thruster Feedline Heater #1 On/Off 



II 

II 


11 

11 

11 

II 


n 

Thruster Feedline Heater #Z On/Off 

it 

11 


II 


It 


II 



11 

Thruster Feedline Heater #3 On/Off 



11 

II 

II 



II 




Thruster Feed! ine Heater #4 On/Off 


II 

11 

II 

II 

II 

II 


II 

fcl 


Thruster Feedline Heater #5 On/OfF 

II 

II 

ti 

II 

It 

11 

II 

It 

11 

II 


Thruster Feed! ine Heater #6 On/Off 

II 

n 

II 


11 

11 

It 

It 


It 

II 

Thruster Feedline Heater #7 On/Off 



It 

1| 

11 

11 


{■ 

n 



Thruster Feedline Heater #8 On/Off 


7l 

11 

It 

II 

11 

11 

It 



II 

Thruster Feedline. Heater ^9 On/Off 



II 

II 

It 

It 


II 

II 



Thruster Feedline Heater ^TO On/Off 
TOTAL 




LIIU 

11 

DIS - 

II 

analog 


11 

11 

It 

II 


Propulsion Subsystem Signal 

Interface List (CCS Inputs) 



Ho. 




Ho. 

Sampling 

or 






of 



Resolu- 

of 

: Update 

GND/CCS 

Signal Name/Synibol • 

Source Dest. 

Type 

Class 

Wires 

Imped. 

Voltage 

tion 

Words 

Rate 

Logic 

Inputs froni Power Processors have been accounted for in ou^;put list. 









Spare PPU Sw Position 
Spare Thruster il Sw Pos 

SH Matrix CCS 

II II 

DIS (10) 
DIS (9) 

Control 

H 

One 

11 

' TED 

II 

28V 

11 

HA 

II 

HA 

II 

TBD 

II 

HA 

Spare Thruster |2 SW Pos 

II 11 

DIS (9) 

II 

It 

It 

It 

11 

11 

It 

II 

Hg Tank #1 Temp- 

Hg Tank " 

A 

TH 

• Two 

560 il 

0-5V 

n 

II 

1/8 Min 


Hg Tank Temp 

* H 11 


II 

It 

II 

|] 

II 

It 

It 


Hg Tank #1 Press 

II II 

11 

11 

It 

It 

tl 

11 

It 

II 

tl 

Hg Tank #2 Press 

Jl 11 

11 

It 

II 

It 

11 

» 

It 

ri 

II 

Hg Feedline #1 Temp 

Lines ” 

II 

11 

it 

ii 

11 

II 

It 

1/Hour 

11 

Hg Feedline il2 Temp 

.11 41 

It 


It 

It 

tl 

II 

It 

tj 

It 

Hg Tank Valve #1 Dpen/Close 

Valve 

DIS 

tl 

One 

TED 

5V 

HA 

II 

2/Day ' 

11 

Control 

Module 











Hg Tank Valve #2 Open 'Close 

a II 

IL 

ti 

It 

tl 

11 

Jl 

11 

II 

11 


Signal Interface List 





No. 

Of 


Resolu- 

No. 

of 

Samplfng 

or 

Update 

GND/CCS 

Signal Name/Synibpl ■ . 

Source 

Dest. 

Type 

Class 

Wires Imped. Voltage 

tion 

Words 

Rate 

Logic 

Thruster #1 Hg Valve Open/Close 

Valve 

CCS 

DIS 

TH 

One TBD BV 

HA 

HA 

Z/5ay 

HA 

thruster #2 Hg Valve Open/Close 

tl 

11 

II 

It 

11 li 


tl 

ir 

II 

II. 

Thruster 13 Hg Valve Open/Close 

U 


It 

II 

U R 


II 

11 


11 

Thruster #4 Hg Valve Qpen/Close 



11 

w 

11 - II 


II 

II 


11 

thruster IS Hg Valve Open/Close 


II 

H 


II II 


II 

II 


It 

Thruster #6 Hg Valve Open/ Close - 

II 


It 

11 

11 11 

tl 

II 

It 

tl 

11 

Thruster 17 Hg Valve Open/Close 



II 

Jl 

n II 


11 

11 


W 

Thruster 18 Hg Valve Open/Close 


II 

It 

II 

11 It 

It 

11 

II 


IS 

Thruster 19 Hg Valve Open/Close 

n 

ir 

II 

II 

11 ^ l! 

11 

11 

11 

11 

II 

Thruster 110 Hg Valve Open/Close 

» ' ■ 


II 

11 

It M 


II 

11 

11 

II 

Thruster 11 Feedline teiTip 

Line 


A 

It 

Two 560 n 0-5V 

155 

It 

1/Hour 

II 

Thruster 12 Feedline Temp 

II 

II 

11 

0 

It II 


11 

11 

It 

11 

Thruster l3 Feedline Temp 

u 

11 

tl 

II 

II 11 

11 

tl 

It 


It 

Thruster 14 Feedline Temp 



It 

11 


II 

II 

It 


11 

Thruster 15 Feedline Temp 


11 

It 

II 


11 

11 

11 


II 

Thruster #6 Feedline Temp 

It 

II 

tl 

li 


11 

tl 

II 

11 

11 

thruster #7 Feedline Temp 

II 

II 

tl 


II 11 

II 

II 

It 

II 

11 

Thruster 18 Feedline Temp 

*11 


It 

II 

It II 

It 

II 

It 


tl 

Thruster 19 Feedline Temp 

II 


11 

ii 

11 11 


11 

II 

II 

1( 

Thruster #10 Feedline Temp 
TOTAL 

It 


II 

DIG 

11 

DIS 

II II 

ANALOG 

It 

1! 

It 

- 

11 


Conmunicatidns Subsystsm Signal Interface 


List (CCS Outputs) 


(i) 


Signal Naine/Synibol 


Source Dest. Type 


LGA Switch Reverse 
(2) HGA switch Dn/Off 

(2) s-Banct IWTA 1 On/Off 

(2) S^Band TWTO 2 On/Off 

(2) X-Band TWTA 1 On/Off 

(2) X-Band TWTA 2 On/Off 

S-^Band Exciter I On/Off 
S-Band Exciter 2 On/Qff 

Receiver 1 On/Off 
Receiver 2 On/Off 

Ranging: On/Off 
TMU 1 On/Off 

TMSJ 2 On/Off: 

7HU 1 Channel Select 

THU 2 Channel Select 
THU 1 Hod Angle 

THU 2 Ksd Angle 

(3) THU 1 Engr Data Rate 

(3) THU 2 Engr Data Rate 
(3) THti 1 Science Data Rate 

(3) TMlI 2 Science; Data Rate 
(2) X-Band: Iso Sw: Reverse ^ 


CCS 


Switch 

II 

Control 

Logic 

Box 


DIS 

DIS 


Receiver 

THU 


DIG 


M 

It 

» 

tt 

Switch 


DIS 


Class 

No. 

of 

Wi res 

Imped. 

Voltage 

Resol u- 
tion 

No.. 

of 

Words 

Sampling 

or 

Update 

Rate 

GND/CCS 

Logic 

Cr Comd 

One 

TBD 

Z8V 

NA 

NA 

-:T/64 Hin 

CCS 

11 

II 

II 

II 

II 


Once 

GNO 

II 

11 

M 

U 

tl 


<1/32 Hin 

CCS 


11 

tl 

t! 

tl 

11 

It 

M 

li 

a 

H 

It 

II 

II 

It 

11 

11 

il 

11 

II- 

It 

11 

li 

11 

II 

11 * 

tl 

11 

I! 

IJ 

<1/64 Hin 

11 

II 

II 

11 

It 

11 

II 

It 

It 

II 

II . 

11 

II 

tl 

II 

<1/32 Min 

11 

ir 

II 

II 

11 

11 

II 

11 

M 

II 

It 

It 

It 

It 

11 

1/6 Hour 

GNO 

n 

II 

It 

It 

it 

It 

TBD 

CCS 

11 

II 

It 

II 

11 


(1 

It 

N Comd 

TBD 

11 

TBD 

2 Bits 

TBD 

<l/Oay 

CCS 

11 

It 

II 

II 

It 

11 

11 

11 

II 

tl 

11 

tl 

7 Bits 


tl 

m 


11 

11 

II 

tl 

11 

II 

tl 

II 

11 

tl 

II 

3 Bits 

11 

<1/32 Hin 

11 

II 

11 

II 

It 

If 

It 

tl 

It 

11 

a 

tl 

II 

12 Bits 


11 

IT 

It 

It 

It 

It 

II 

11 

It 

11 

II 

It 

It 

28V 

NA 

KA 

<1/64 Hin 

CCS 


(t) HGA giaibal coiimands/neatsureaients are shown in structures and mechanisms 
(2l Planetary missions only 

(3) Attached science payload qnlyj planetary missions only 



Signal Interface List 


Signal Name/Syjiibol ^ 

Source' 

Dest. 

Type 

Class 

(4] TV FH Xmitter Select 

CCS 

Xmitter 

DIS 


(4): TV FH Xmitter 1 • Dn/Off ' 

11 

II 

ir 


(4) TV FH Xmitter a On/Off 

It 

II 

II 

• 

(4) TV Hod Exciter ! Dn/Off 

It 

Exciter 

ir 


(4) TV Hod Exciter £ On/Off , 

It 

» 

M 



TOTAL: 


DIG 

DIS 

ANALOG 

Planetary 


8 

T4 

0 

Earth orbital 

- 

4 

13 

0 


(4) Earth Orbital missions only 




No. 

of 

Wires 

Imped. 

Voltage 

Resolu- 

tion 

No. 

of 

Words 

Sampling 

or 

Update 

Rate 

GND/CCS 

Logic 

One 

TBD 

28V 

NA 

NA 

TBD 

CCS 

II 

II 

M 

II 

«» 

11 

}| 

11 

ri 

11 

ir 

II 

tl 

ii 

M 

II 

11 

u 

II 

Jl 

II 

|l 

II 

11 

11 

II . 


II 



Cqimunicatlons Subsystem Signal 

Interface List {CCS Inputs) 



No. 

of 



Resolu- 

No, 

of 

Sampling 

or 

Update 

GND/CCS 

Signal rjame/Symbol 

Source 

Best. 

Type 

Class 

Wires 

Imped. 

Voltage 

tion 

Words 

Rate 

Logic 

Command/Conflgurati on Verify 


CCS 

DIG 

TH 

TBD 

TBD 

TBD 

8 Bits 

NA 

<1/64 ran 

NA 

lM(i’ 1 Qsc Temp 

THU. ■ 

II 

A 

Control 

Two 

II 

It 

0.1^ 

ll 

II 

ll 

TMli 2 Osc Temp 

It 

It 

A 

II 

11 

II 

It 

tl 

II 

11 

11 

THU 1 Subcarrier 1 Level 

n 

11 

A 

TH 

11 

11 

II 

1% 

11 


It 

TMU 2 Subcarrier 1 Level 

11 

II 

A 

II 

11 

It 

II 

It 

ir 

tl 

II 

THU 1 SiJbcarrier 2 LeVel 

II 

It 

A 

11 

ft 

II 

U 

It 

It 


If 

THU 2 Subcarrier 2 Level 

II 

II 

A 

It 


II 

II 

It 

II - 

11 

11 

S-Band Exciter #1 Current 

Exciter 

It 

A 1 

Control 

11 

It 

11 


tl 

It 

II 

S-Band Exciter §Z Current 

II 

11 

A 

11 

11 

H 

II 

M 

It 

tl 

11 

S-Band Exciter IT Output Level 

H 

II 

A 

11 

II 

11 

tl 

It 

It 

II 

11 

S-Band Exciter #2 Output Level 

II 

It 

A 

It. 

n 

II 

It 

11 

It 

It 

11 

* S-Band THTA 1 Current 

THTA 

It 

A 

n 

II 

11 

11 

It 

11 

<1/32 Hin 

II 

S-Band TKTA 2 Current • 

11 

II 

A 

II 

11 

II 

11 

II 

It 

n 

1( 

* SrBand TWTA t Temp 

It 

tt 

A 

tl 

It 

11 

It 

11 

11 

<1/64 Hin 

tt 

S-Band TWTA 2 Temp 

n 

II 

A 

II 

II 

11 

11 

II 

It 

Ti 

.11 

* S-Band THTA T Output Level 

ti 

It 

A 

tl 

n 

11 

II 

n 

It 

<1/32 Min 

11 

* S-Band THTA; 2 Output Levc ! 

It 

II 

A 

ir 

It 

It 

It 

It 

It 

>1 

tl 

* X-Band THTA 1 Current 

n 

U 

A 

It 

ii 

II 

11 

tl 

II 


tl 

* X-^Band THTA 2 Current 

.11 

n 

A 

II 

u 

11 

II 

II 

tl 

11 

u 

* X-Band THTA 1 Temp 

H 

u 

A 


It 

11 

11 

tl 

• It 

<1/64 Min 

n 

* X-Band THTA 2 Temp . 

U 

K 

A 

|[ 

11 

II 

11 

11 

II 

ll - 

It 

* X“13and TWTA, 1 Output Level 

tl 

It 

A 

11 

II 

11 

tl 

11 

II 

<1/32 Hin 

II 

* X-^Band THTA 2 Output Level 

II 

II 

A 

tl 

II 

U 

II 

11 

11 

It 

11 

* X-^Band Oscillator Temp 

.4 

:*Planetary missions only 

* qsc 

II 

A 

TH 

u 

It 

It 

11 

It 

TBD 

11 



signal Interface List 


Signal Natne/Symbol 

Receiver 1 Current 
Receiver 2 Current 

Receiver 1 Temp 

Receiver 2 Temp - • * 

Receiver 1 AGC Level 
Receiver 2 AGC Level 

: Receiver ^ Static Phase Error 
Receiver 2 Static Pbiise Error 

-** TV FH Exciter 1 Current 
** TV FH Exciter 2 Current 

■** TV FH Exciter 1 Output Level 
TV FH Exciter 2 Output Level 

** TV FH Kfflitter 1 Current 
** TH FH Xmitter 2 Current . 

TV FH Xmitter 1 Temp; 

TV* FH Xmi tter 2 Temp 

TV FH Xmitter T Output Level 
** TV FH Xmitter 2 Output Level 

Coirraand Decoder A Output 
Command Decoder B Output 


TOTAL ■ 

‘ Planetary 
Earth OrbitaT 






Ko.. 

of 

Imped. 


Resolu- 

Ko. 

of 

Sampling 

or 

Update 

GND/CCS 

Source 

Dest. 

Type 

Class 

Hires 

Voltage 

tion 

Words 

Rate 

Logic 

Receiver 

CCS 

A 

Control 

Two 

TBD 

TBD 

sa- 

HA 

<1/32 Min 

NA 

« , 

tl 

A 

II 

H 

II 

It 

il 

11 

11 

H 

It. 

tl 

A 

It 


11 

n 

11 


<1/64 Hin 

tl 

It ■ 

II 

A 

It 


V 

It 

It 


II 

11 

II 

!■ 

A 

It 


11 

II 

n 

tl 

<1/32 Hin 

11 

II 

II 

A 

II 


it 

II 

It 


M 

11 

II 

\t 

A 

TH 

II 

It 

11 


II 

« 

It 

t*' 

n 

A 

tl 


II 

11 

II 


II 

It 

Exciter 

11 

Ik 

A 

A 

Control 

II 

It 

Tl 

It 


<1/64 Hin 

It 

n • ■ 

tl 


tr 

M 

II 


11 ‘ 

II 

11 

IF 

A 

tl 

It 

11 

II 

It 

II 

tl 

* II 

M 

It 

A 

tl 

II 

II 

tl 

u. 

It 

II . 

tl 

Xmitter 

n 

ft 

A 

11 


II 

It 

it 

» 

<1/32 Hin 

« 

It 

. A 

11 

M 

tl 

tl 

It 

II 

. II 

II 

11 

II 

A 

]| 

11 

tl 

11 

II 

Tl 

<1/64 Hin 

tl 

11 

II 

A 

|k 

tl 

. 

11 

tl 

ti 

■1 

ri 

-M 

« 

A 

11 


11 

11 

tl 


<1/32 Hin 

« ■ 


II 

A 

11 


if 

It 

11 


II 

11 

Decoder 

II 

DIG 

II 

TBD 

Tl 


NA 


As Req'd 

M 

It 


DIG 
DIG ' 

. 3 

3 

II 

DIS 

0 

0 

11 

ANALOG 

31 

28 

11 

It 

11 

*** 

It 

11 


^^Earth'Orbital missions only 

: ***flumber of command words varies with the particular command 




CCS; Signal Interface List (OUtpU^^ 

Signal Nartie/Symhol Source 

Attitude Error Coirmand 

jfitch ' ■ ; CCS 

^Roll : 

;4Yaw " 

■^ Attitude translation ConmantI 

'■ •a ■ ■ . ' : " 

■ " . 

: total t . 

: . Planetary 
Earth Orbital 


Rq. 





of 

Dest. 

Type 

Class 

Hires Imped 


monly 

DIG 

H Comd HA 

(TH only) 

HA 

It 

II 

M 

It 

It 

tk 

u 

11 

M 

11 


11 

It 

(1 

II 

ii 

11 

n 

II 


II 

It 

II 

li 


11 


. DIG 

DIS 

AiiALOG 



3 

0 

0 



6 

0 

0 



Voltage 

Resolu- 

tion 

Ho. 

of 

Words 

Sampling 

or 

■Update 

Rate 

GHO/CCS 

Logic 

HA 

o;35S 

One 

1/Hin 

CCS 

1. ^ 

11 

ll 

11 

It 

II 

II 

11 . 

ll 

il 


11 

11 

t1 

It 

l! 

Ji 

« 

It 

a 

II 

II 

U 

II 

a 

a 


. *These signals are for TH only. The actual gircbal and RCS valve conwands are shown in GRi^C list. 
**Earth Orbital missians only 


Tape Recorder Signal Interface List, (CCS Outpujt) 


Signal Naire/SymboT 

Tape Recorder T Pwr Oe 
Tape Recorder 2 Pwr On 

Tape Recorder T Standby/Stop 
Tape Recorder 2 Standby/Stop 

Tape Recorder t Record 
Tape Recorder Z Record 

Tape Recorder T Playback 

.Tape Recorder 2 Playback 
Tape Recorder T Rewind 

Tape Recorder 2 Rewind 

Tape Recorder T Pwr Off 
Tape Recorder 2 Pwr Off 


TOTAL 


Source 

Dest* 

Type 

Class 

No. 

of 

Wires 

Imped. 

No, 

: Resol U- of 

Voltage tion Words 

Sampling 

dr 

Update 

Rate 

GND/CCS 

Logic 

CCS 

Recorder 

DIS 

N Comd 

One 

TBD 

28V HA 

NA 

Once 

GNO 

u 

II 

a 

11 

II 


11 If 

It 

II 

It 


a 

■ a : 

ti 

It 

It 

a /- It 

It 

Z/Hour 

CCS 


II 

a 

H 

It 

It 

a II 

It 

n 

It 


H 

1! 

SI 

li 


11 a 

11 


a 


n 

11 

II 

11 


II 11 

11 

II 

11 


ir 

II 

It 

a 

II 

11 It 

11 

2/Hr for 

*GHD/CCS 


II 

It 

II 

a 

11 

a a 

II 

8 HR/WK 

II 



It 

'* 

11 

It 


11 a 

11 

**1/Week 

GND 


; It 

It 

11 

ti 

tx 

a a 

It 

***1/Day 

)i 

'll 

If 

a 

a 

It 

II 

II 

' 11 11 

It 

Once 

CCS 

Jf 

a 

li 

It 

II 

It 

11 II 

a 

M 

11 


, DIG 
0 ■ ' 

DIS 

12 

ANALOG 

0 

* 







***Earth Orbital 


missions drily 


^Ground cpiEmarids initiate 1st playback Lonsnand* CCS controls subsequent 
**Plahetary missions only\ 


coirmands until all data is telemeteredi, 



Tape Recorder Signal interface List {CCS Input) 


Signal Rarae/S^bol 

Source 

Dest* 

Type 

Class 

Tape Rec T Servo Phase 

Recorder 

CCS 

A 

TO 

Tape Rec 2 Servo Phase 


II 

A 

» 

Tape Rec 1 End of Tape 

ti 

11 

DIS* 

Control 

Tape Rec Z End of Tape 

II 

11 

li * 

11 

Tape Rec 1 Beginning of Tape 


II 

II * 

II 

Tape Rec 2 Beginning of Tape 


II 

11 * 

II 

Tape Rec V Temp 

It 

II 

A 

II 

Tape Rec 2 Temp 

li 

II 

A 

II 

-■ 


DIG 

DIS 

ANALOG 

TOTAL 


0 

4 

4 


i^Ldgical 2V P-P 




No. 

of 

Wires 

Imped. 

Voltage 

Resolu- 

tion 

No. 

of 

Words 

Sampling 

or 

Update 

Rate 

GND/CCS 

Logic 

Two 

TBD 

TBD 

1S5 

NA 

2/Hour 

NA 

It 


ir 

It 

II 

11 

II 

One 

II 

** / 

HA 

11 

1/50 DAYS 

11 

tl 

» 

11 

ii 

II 

n 

II 

II 

tl 

11 

n 

II 

It 

11 

11 

11 

II 

11 


II 

11 

Two 

11 

11 

It 

II 

It 

0.3S 

11 

II 

11 

VHin 

it 

II 

II 



i 



j 

I 

i 




Solar Array Subsystfi!)!' Signal interface List 

(CCS Outputs) 








Sampling 







Wo. 




Ko, 

or 







of 



Resolu- 

of 

Update 

GND/CCS 

Signal Name/SymboT 

Source 

Best. 

Type 

Class 

Wires 

Imped. 

Voltage 

tion 

Words 

Rate 

Logic 

:SA A Contairiment Lid Released 

CCS 

SA 

DIS 

Or Comd 

One 

lOKn 

Z8V 

NA 

WA 

Once 

GND 

SA B ContatnBient Lid Released 


H 


It 

n 

11 

II 

II 

11 

Jl 

Jl 

SA A Extend 

tt 

ir 

DIS 

II 

a 

It 

It 

NA 

1l 

<WMission 

II 

SA B Extend 


II 

II 

II 


It 

II 

II 

II 

II 

II 

sA A Retract 


II 

II 

II 

it 


11 

It 

11 

’ll 

M 

SA B Re tv act 


>1 

>1 

It 

It 

U 


u 

II 

** 

It 

SA A Partial Rdtract/Extend 


M 

ii 

t| 

It 

II 

II 

n 

II 

II 

II 

SA B Partial Retract/Extend ' 


II 

11 

11 

II 

11 

II 

It ; 

It 

K 

M 

SA A Reconfigure 

II 

SA 

II 

» 

It 

II 



II 

Once 


SA B Reconfigure 


II 

tt 

n 


11 

ri 

it 

II 

It 

11 

SA A Rotate CCW 

'll 

Drive 

DIG 

ir 

ti 

II 

II 

8 Bits 

Onfc 

l/Sec 

CCS* 

SA B Rotate CCW 


II 

II 

II 


H 

11 

It 

It 

11 

II 

SA A Rotate CW 

11 

It 

II 

11 


n 

II 

11 

X 

11 

M 

SA B Rotate CW 


II 

ii 

11 


ti 

II 

tl 

It 

II 

II 

' 


DIG 

DIS 

ANALOG 







* 

tom 


4_ 

10 

0 








^Based on Cl) closed loop contrpl 

using Sun 

seiiSor and (2) 

temperature 

bias on 

inbound 

missions. 







Solar Array Subsystem Signal Interface List 

(CCS Inputs) 


Signal Name/Symbol 

Source 

Dest. 

Type 

SA A Secured 

SA Wing 

CCS 

DIS 

SA B Secured 

n 

It 

tl 

SA A Mot Secured ■ > . . 

II 

II 

II 

SA B Not Secured 

ri . 

11 

It 

SA A Containment lid Not Released 

II 

II 

II 

SA B Containment Lid Not Released 

n. 

11 

II 

SA A Fully Deployed 

It 

»l 

» 

SA B Fully Deployed 

II 

P 

II 

SA A Partially Deployed 


II 

11 

sA B Partially Deployed 

•if 

U 

11 

SA A Retracted 

if 

ir 

» 

SA B Retracted \ 


n 

II 

SA A. Temp . 

. ti 

II 

A(41)* 

SA B Temp 

11 

It 

A(41)* 

SA A Voltage 
SA B Vol tage 

It 

II 

It 

Af41)* 

A(41)* 

SA A Current 

a 

« 

A(411* 

SA B Current ■ 


tl 

A(41)* 

SA A Orientation Pos 

Drive 

CCS 

A 

SA B Orientation; Pos 

« 

It 

r 



DIG* 

DIS 

TOTAL 


2 . 

12 


i) Teinp monitoring tty CCS for biasing S^ angle on inbound mission* 
zj For use in peak .power tracking. 


^Assume loc:a1 A/D and multiplexing at SA resulting in 1 serial digital 

if 



No.’ 

of 



Resolu- 

No. 

of 

Sampling 

or 

Update 

GND/CCS 

Class 

Wires 

Imped. 

Voltage 

tion 

Words 

Rate 

Logic 

Control 

One 

lOKiJ 

5V 

NA 

HA 

1/Sec 

NA 

II 

It 

II 

II 

11 

11 

ir 

II 

U 

tl 

11 

II 

1* 

tl 

tt 

M 

tl 

It 

11 

II 

11 

■1 

)■ 

II 

II 

II 

11 

28V 

11 

it 

II 

M 

II 

II 

It 

11 

If 

11 

It : 

It 

Control 

11 

11 

■5V 

11 

tl 

It 

II 

II 

II 

' 11 

11 

U 

’ n 

It 

« 

II 

II 

11 

n 

It 

II 

II 

U 

II 

II 

11 

u 

It 

11 

n 

II 

» 

11 

II 

II 

II 

« 

it 

11 

11 

tl 

11 

II 

11 

tl 

II 

tl 

11 

Three 

|l 

0-5V 

5% 

It 

11 

H 

It 

It 

II 

11 

It 

It 

11 

It 

11 

Two 

II 

It 

1^ . 

11 

II 

11 

11 

M 

II 

II 

1% 

11 

II 

IT 

n 

II 

11 

u 

U 

It 

11 

It 

II 

tt 

11 

II 

It 

It 

tl 

II 

Control 

Four 

20KR 

0"5V 

2% 

HA 

1/Sec 

NA ■ 

u 

ANALOG 

tl 

x\ 

II 

II 

It 

u 

tl 


2 


signal supplied to CCS from each solar wing. 


Structures and Mechanisms Signal Interface 


Signal Name/SimibQl Source 

Truss Attach Pj'ro A Fire CCS ’ 

Truss Attach Pyro B Fire " 

Truss Rotate Pyro A " 

Trass Rotate Ryro B ' • *' 

Base Support Pyro A Fire " 

: Base Support Pyro: B Fire " 

HGA Pyro A Fire " 

** HGA Pyro B Fire . " 

Antenna Boom Attach Pyro A Fire ' '' 

Antenna Boom Attach Pyro B Fire " 

SA Pkg Deploy PyrO; A Fire ' " 

SA Pkg Deploy Pyrp B Fire " 

Sunshade Release Pyro A Fire ” 

Sunshade Release pyro B Fire " 

Thruster Release pyro A Fire 
Thruster Release Pyro B Fire " 

■** *** HGA Clock Angle : ” 

** HGA Cone Angl e / 

Pay! cad: :Rel ease Pyro A Fire “ 

PayToad:Release Pyro B Fire ^ “ 

** Sci Pkg/Boom Pyro A Fire ’* 

Scf. Pkg/Boom Pyro B Fire " 

Retract' SA Pkg A ’ . " 

***■ Retract 5A Pkg B '; ' " 


*50 - 100 nis pulse 

**Planetary mibSiqns only : 

***Earth Orbital missions only 


(CCS Outputs) 


Best. 

Type 

Class 

No. 

of 

Wires 

Imped. 

t/l 

A 

OIS* 

Cr Comd 

One 

560 n 

it 

II 

11 

tl 

II 

II 

11 

II 

II 

11 

11 

11 

tl 

It 

tl 

» 

11 

II 

It 

II 


II 

II 

II 

IT 

II 

11 

II 

11 

It 

li 

II 

It 

11 

II 

It 

It 

II 

11 

II 

It 

It 

11 

tl 

It 

It 

II 

II 

II 

Tl 

It 

11 

II 

II 

11 

ri 

11 

11 

It 

11 

1) 

ri 

» 

It 

n 

n 

M 

It 

II 

It 

II 

11 

It 

II 

II 

PI 

DIG 

It 

TBD 

TBD 

It 

It 

11 

11 

II 

II 

DIS* 

II 

One 

560 ft 

It 

II 

It 

II 

II 

ti 

11 

11 

11 

It 


11 

It 

II 

n 

;'ji’ 

DIS 

11 

n 

II 

>1 ‘ 

It 

11 

a 

. tl 


Voltage 

Resolu- 

tion 

No. 

of 

Words 

Sampl ing 
or 

Update 

Rate 

GND/CCS 

Logic 

23V 

NA 

NA 

lO/Sec 

CCS 

It 

II 

11 

II 

tl 

II 

II 

11 

11 

It 

tl 

II 

ft 

11 

r 

11 

II. 

M 

II 

II 

II 

ft 

II 

II 

II 

II 

it . 

11 

It 

II 

it 

It 

11 

II 

II 

II 

II 

M 

II 

«t 

11 

II 

tl 

II 

11 

II 

tl 

II 

tl 

11 

tl 

tl 

tl 

11 

11 

11 

II 

it 

1] 

It 

II 

11 

It 

11 

JI 

li 

It 

II 

11 

11 

It 

It 

tl 

** ♦ 

Tl • 

TBD 

TBD 

TBD 

As Req’d 

It 

11 

ii 

tl 

11 

11 

28V 

NA 

NA 

10/Sec 

'gnd 

ii 

ii 

It 

It 

It 

It 

It 

11 

it 

11 

It 

•>i 

11 

11 

tl • 

11 

li 

ji 

11 

II 

II 

II 

u 

It 

II 


Signal Interface List 


Sampling 







No. 




No. 

or 







of 



ResoTut 

of 

Update 

GND/CCS 

Signal ■ Hame/Symbol 

Source 

'Pest. 

Type 

Class 

Wires 

Imped. 

Voltage 

tion 

Words 

Rate 

Logic 

Docking; Mechanism latch 

CCS 

S&H 

DIS 

Cr Corad 

One 

560 11 

28V 

NA 

HA 

1 d/Sec 

GNO 

***■ Docking Mechanism. Release . 

It 

II 

11 

It 

II 

n 

II 

II 

It 

U 

II 

* Hiscananeous (50) 

M 

II 

DIS{50) 

it 

n 

II 

II 

II 

It 

T/Sec 

Jl 



DIG 

DIS 

ANALOG 




■ 




TOTAL 



70 









Planetary 


2 

0 




* 




Earth Orbital 

0 

70 

0 









*Not specifically defined at this time. 
***Earth Orbital missions only 


Structures 'and Kechanisms Signal 

Interface List 

(CCS Inputs) 


no. 

of 



Resolu- 

No. 

of 

Sampling 

or 

Update - 

GND/CCS 

* Signal Hame/Syinbol 

Source 

Dest. 

Type 

Class 

Wires 

Imped. 

Voltage 

tion 

Words 

Rate 

Logic ■ 

Truss Attach Pyro A Rred 

SAM 

CCS 

DIS 

Cr Comd 

One 

TBD 

5V 

NA 

NA .. 

1/Min 

NA 

Truss Attabh Pyro B Fired 


II 

tl 


II 

if 

n 

II 

tl 

U 

II 

Truss Rotate Limit A 


It 

II 

11 

It 

11 

ti 

ft 

11 

It 

fl 

Trass Rotate Limit B’: • 

1, 

II 

It 

11 

tl 

[] 

tl 

II 

It 

II 

II 

**:HGA Clock. Angle 


ii 

DIG 

tl 

II 

n 

II 

0.1^ 

* TBD 

II 

M 

**';HGA Cone Angle 

II 

(I 

It 

It 

II 

It 

It 

It 

II 

ii 

II 

SA Pkg Deploy Pyro A Fired 

It 

ti 

DIS 


II 

11 

If 

II: 


11 

If . 

SA Pkg Deploy Pyro B Fired 

11 

II 

tl 

It 

11 

II 

11 

11 

11 

11 

tl 

SA P kg A Deployed 

Tl 

It 

It 


II 

tl 

II 

II 



It 

. SA Pkg B Deployed 


11 

Ii 


tl 

ii 

II 

II 

tl 

11 

it 

* SA Pkg A Stowed 


n 

ii 


II 

II 

tl 

11 


II 

ii 

* SA Pkg B Stowed 


11 

tl 

It 

11 

11 

It 

II 

II 

11 

tl 

Sunshade Release Pyro A Fired 


tl 

II 

It 

It 

H 

11 

II 

II 

11 

tl 

Sunshade Release Pyro B Fired 


n 

It 

11 

II 

tl 

II 

II 


II 

a . 

Sunshade Deploy Verify 


It 

It 

tl 

II 

II 

II 

i| 

n 

II 

n 

Thruster Release Pyro A Fired 


It 

11 

tl 

It 

It 

It 

n 

II 

II 

11 

Thruster Release Pyro B Fired 


II 

II 

III 

II 

11 

\\ 

II 


II ’ 

11 

Thruster/ Actuator Released 


II 

tl 

11 

II 

11 

II 

11 

It 

II . * *■ 

It 

Sci Pkg/Bopm Pyro A Fired 


If 

It 

II 

It 

tl 

II 

II 


II 

If 

** Sci Pkg/Bobm Pyro B Fired 

II 

II 

It 

tl 

It 

It 

II 

It 

II 

It 

ii 

Sci Pkg Stowed 


■1* 

tl 

it 

tl 

11 

It 

II 

It 

11 

Ii 

* Docking Latch Verify A 


II 

ii 

II 

II 

11 

11 

11 


H 

•It 

* Docking Latch Verify B 

• 

*Ear.th orbital Miss'ons only 
**Pl,anetary mission i^nly 


It 

It 


It 

II 

ri 

II 

It 

tl 

If 


Signal Interface List 


Signal Karae/S^bol 

** HEA PiTo. A Fired 
KEA Pyro B Fired 

Antenna ::Boom Attach Pyro A Fired 
**• Antenna Boon Attach Pyro B Fired 

Antenna Boom Deploy Verify 
Payload Release Pyrg A Fired 

Payload Release Pyrd B Fired 
Base Support Pyro A Fired 

Base Support Pyro 8 Fired 
Structural Strain Gauges 


TOTALS 


Source Best. 

Type 

Class 

Ho. 

of 

Wires 

SSM CCS 

It 11 

ir n 

It it 

n II 

DIS 

tl 

11 

<1 

11 

Cr Comd 

11 

II 

11 

. TBD 

It 

II 

II 

It II 

ir 11 

a II 

II 

II 

II 

A(15) 

IJ 

II 

TM 

11 

11 

II 


DIG 

DIS 

AKALOG 

Planetary 

2 

26 

15 

Earth Orbital 

G 

22 

15 


Imped. 

Voltage 

Resolu- 

tion 

Ho. 

of 

Words 

Sampling 

or 

Update 

Rate 

GND/CCS 

Logic 

TBD 

5V 

HA 

HA 

1/Hin 

HA 

II 

II 

II 


tl 

11 

II 

IT 

ii 



II 

It 

It 

It 

II 

IJ 

11 

If 

It 

n 


tl 

II 

U 

n 

tr 

II 


'll 

n 

II 

II 

tl 


II 

11 

ii 

It 

11 

(J 

11 

11 

H 

ir 

11 


. 

TBD 

TBD 

TBD 

HA 

1/Hour 

II 


**Planetary mission tinly 



ThsrraaT Control Subsystem Signal Interface List 

Signal Name/Symbol Source Dest. Type 


Sampling 

Ho. No. or 

vr Resol u- of Update GND/CCS 

Class Wires Imped. Voltage tion Words Rate Logic 


There are 43 to 45 heaters on-board SEPS. ON/OFF sequencing of these heaters is normally by thermostat control. Ground override comnands are 
provided for contingency. These commands and temperature ineasurenients appear in the particular subsystem that they are associated with. Potential 
heaters exist for the following; 


Hg Feedline Heaters 
Thruster Feedline Heaters 
RCS Thruster Heaters 
RCS Line Heaters’ 

Sun Sensor Heaters 
Star Tracker Heaters 
*TV Camera Heaters 
*Laser Radar Heaters 
Battery Heaters 



TOTALS 


DIG DIS ANALOG 

0 0 0 



*£arth Orbital raissioris only 


i 

j 


I 



PDS signal Inlierface List (CCS Outputs) 


Signal Kamev^S^mbol 

Umbilical A On/Off 
l/jnhilical B On/Off 

Regulator A On/Off 
Regulator B On/Off 

Regulator Standby Qn/Off 
Canverter On/Off 

Converter Standby On/Off 
Inverter A dn/Off 

Inverter B 'On/Off 
Battery Charge A On/Off 

Battery Charge B On/Off 
Battery Charge A Hi/Low 

Battery Charge B Kf/Low 
Low Volt Cutoff A On/C;f 

Loyf Volt cutoff B On/Off 
Safe/Arni A On/Off 

Safe/Arm B On/Off 
Keep Alive Only On/Off 

PPli Converter On/OP' 


tOTAL 


Source 

Dest. 

Type 

Class 

No. 

of 

Mires 

Imped. 

Voltage 

Resolu- 

tion 

No. 

of 

Words 

Sampling 

or 

Update 

Rate 

GND/CCS 

Logic 

CCS 

PDS 


Cr Comd 

One 

560 n 

Z8V 

HA 

NA 

1/Hin 

GKD 

L! 

11 

It 

II 

II 

It 

11 

ii 

" 

11 

ir 

H 

11 

It 

n 

11 

It 

11 

11 

II 

II 

CG3 

Jt 

II 

ir 

11 

11 

U 

11 

11 

II 

11 

It 

IJ 

11 

II 

II 

» 

ri 

11 

II 

It 

II 

It 

n 

*“1 

II 

II 

11 

11 

11 

II 

11 

11 

II 

11 

11 

n 

II 

IJ 

11 

ri 

11 

11 

ti 

It 

II 

11 

» 

11 

It 

II 

» 

Ii 


Ii 

11 

It 

11 

11 

ti 

ir 

ir 

II 

ir 

11 

11 

11 

II 

II 

It 

11 

11 

II 

11 

11 

11 

If - 

11 

' 11 

11 

11 

It 

11 

ir 

II 

11 


ir 

11 

« 

II 

» 

It 

It ^ 

It 

11 

II 


It 

ji 

II 

II 

II 

It 

11 ' 

It 

11 

It 

11 

It 

11 

II 

It 

It 

If 

It 

]i 

It 

It 

II 

VHin 

CCS 

11 

IF 

II 

II 

It 

II 

ir 

11 

It 

11 

It 

11 

II 

rr 

II 

It 

11 

11 

ti 

It 

iq/Sec 

II 

ti 

11 

II 

]i 

II 

II 

11 

M 


11 ‘ 

u 


II 

It 

11 

11 

II 

II 

IJ 

11 

T/Min 

It 

ir 

11 

11 

11 

n 

n 

» 

II 

11 

» 

11 


DIG 

0 


DIS 

18 


AHALOG 

0 


|1) 50-100 msec pulse 

.£) Additional corcppnent on/off contrands/measurenients are contained in the various other subsystems. 


PDS Signal Interface List [CCS Inputs) 


Signal fiame/Symbol 

Urabilfcal A On/Off 
Unbilical B On/Off 

Regulator A On/Off 
Regulator B On/Off 

Regulator Standby On/Off 
Converter On/Off 

Converter Standby On/Off 
Inverter A Qn/Dff 

Inverter 8 Dn/Off 
Battery Charge A On/Off 

Battery Charge B On/Off 
Battery Charge A Hi/LoVf 

Battery Charge B Hi/Lo* 
Low Volt Cutoff A On/Off 

Low Volt Cutoff B On/Off 
Safe/Arm A On/Off 

Safe/Aral B On/Cff 
Keep Alive Only On/Off 

PPO Converter On/Qff 
SA Hing A Current 

SA Wing B Current 
Power Con d Current 

SA Voltage 

Converter Output Current 

Converter Standby Current 
DC Bus Voltage 


Source 

Dest. 

Type 

Class 

Wo. 

of 

Wires 

Imped. 

Voltage 

Resolu- 

tion 

No. 

of 

Words 

Sampling 

or 

Update 

Rate 

GHD/CCS 

Logic 

PDS 

CCS 

DIS 

Control 

One 

TBD 

28V 

NA 

HA 

1/Min 

HA 

It 

11 

II 

tl 

tl 

tl 

11 


II 

II 

It 

' 11 

t1 

tl 

tl 

It 

H 

tl 

11 

It 

a 

11 

11 

It 

11 

M 

II 

It 

11 

It 

11 

a 

a 

It 

It 

a 

It 

11 

II 

It 


II 

ir 

a 

M 

tl 

a 

It 

11 

II 

II 

a 

II 

II 

a 

It 

n 

11 

11 

tl 

. 11 

a 

» 

II 

a 

II 

It 

11 

M 

» 

II 

H 

u 

u 

It 

a 

It 


ir 

11 

II 

tt 

11 

11 

a 

a 

tl 

a 

1! 

It 

a 

II 

11 

tt 

It 

It 

a 

11 . 

II 

It 

11 

a 

a 

a 

II 

It 

a 

a 

It 

a 

It 

II 

11 

a 

11 

a 

a 

tl 

II 

It 

a 

It 

11 

II 

II 

tl 

u 

a 

11 

u 

a 

It 

11 

II 

II 

It 

11 

n 

» 

II 

It 

a 

It 

rt 

n 

11 

It 

11 

tt 

ir 

II 

a 

II 

a 

IS 

11 

r* 

It 

It 

II 

n 

n 

M 

10/Sec 

IT 

It 

M 

It 

II 

II 

[i 

II 

tl 

a 

a * 

u 

II 

II 

It 

11 

ir 

» 

11 

It 

It 

1/Min 

II 

11 

It 

11 

II 

II 

II 

» 

It 

a 

II 

a 

ti 

II 

A 

Control 

Two 

TBD 

TBD 

1% 

a 

TBD 


It 

11 

A 

11 

It 

II 

a 

II 

a 

a 

It 

It 

M 

A 

U 

II 

M 

II 

u 

a 

a 

a 

11 

n 

A 

II 

a 

II 

II 

tt 

II 

li 

11 

ti 

It 

A 

It 

a 

It 

It 

II 

a 

II 

a 

It 

n 

A 

11 

II 

11 

II 

tl 

a 

a 

It 

It 

n 

A 

a 

II 

II 

11 

M 

11 

a 

II 


signal Interface List 




Class 

No. 

of 

Hi res 

Inped. 

Voltage 

Resolu- 

tion 

No. 

of 

Words 

Sampling 

or 

Update 

Rate 

GND/CCS 

Logic 

Control 

Tv;o 

TBD 

TBD 

n 

NA 

TBD 

NA 

11 

n 

11 

It 

II 

Tl 

It 

t) 

11 

tl 

II 

II 

11 

11 

II 

11 

11 

» 

II 

11 

11 

[1 

II 

tl 

II 

ir 

11 

tl 

11 

11 

II 

11 

tl 

ir 

tl 

tl 

tl 

11 

II 

If 

n 


11 

» 

TBD 

It 

11 

M 

II 

II 

It 

tl 

TBD 

It 

tl 

11 

II 

tl 

It 

tl 

1% 

It 

fl 

It 

II 

tl 

It 

II 

tl 

It 

11 

II 

n 

II 

It 

It 

II 

II 

11 

II 

ir 

II 

II 

II 

It 

Tl 

It 

tl 

11 

tl 

11 

II 

11 

II 

It 

» 

II 

I' 

tl 

Tl 

:i 

11 

It 

n 

11 

II 

tl 

» 

z% 

It 

II 

tt 

n 

It 

II 

II 

11 

ir 

tl 

n 

(1 

II 

11 

tl 

■ n 

ft 

tl 

II 

ti 

It 

11 

11 

11 

It 

ti 

II 

II 

]i 

It 

It 

\% 

11 

It 

» 

11 

ji 

Ik 

II 

11 

tl 

II 

tl 


I 

i 


Attached Science Package (Typical) Signal Interface List (CCS Outputs)* 


Signal Name/Symbol 

Source 

Dest, 

Type 

Class 

No. 

of 

Wires 

Imped. 

Voltage 

Resolu- 

tion 

No. 

of 

Words 

Sampling 

or 

Update 

Rate 

GND/CCS 

Logic 

Scan Pltf Control: 

Arm Deploy 

CCS 

Pltf 

DIS 

TBD 

One 

TBO 

TBD 

NA 

m 

Once 

GND 

Depl oy 

II 

it 

11 

II 

II 

tl 

tl 

tl 

11 

11 

If 

Remove Cover 

a 

U 

tl 

11 

11 

It 

It 

It 

II 

II 

11 

Scan Control On 

II 

It 

11 

11 

It 

tl 

11 

U 

d 

(» 

11 

Scan Control Off 

n 

11 

II 

n 

II 

tl 

11 

tl 

II 

11 

11 

Cone Slew ' . sitive 

If 

11 

t! 

II 

n 

It 

tl 

II 

II 

1/Sec 

CCS 

Cone Slew Negative 

II 

It 

II 

tl 

tl 

II 

11 

11 

tl 

II 

tl 

Clock Slevj Positive 

n 

11 

It 

11 

11 

tl 

tl 

11 

It 

11 

H 

Clock Slev/ Negative 

n 

M 

tl 

It 

tl 

If 

n 

It 

11 

11 

II 

Fast Slew Rate 

II 

11 

M 

n 

n 

II 

II 

11 

d 

1/10 Sec 

I* 

Slow Slevf Rate 

II 

It 

It 

If 

11 

11 

tl 

tl 

II 

II 


Harro’w-Anqle TV:** 
Start Frame 

CCS 

TV 

DIS 

tl 

One 

tl 

11 

11 

HA 

1/42 Sec 

CCS 

n '• 

Start Scan 

M 

II 

DIS 

u 

11 

U 

tl 

11 

IT 

tl 


Calibrate 

(1 

11 

DIG 

11 

TBD 

II 

d 

IT 

4 Bits 

1/Hour 

GND 

Data Read 

11 

IT 

DIS 

» 

One 

tl 

II 

tl 

NA 

1/42 Sec 

CCS 

Filter Vlheel Advance 

u 

IT 

DIG 

II 

TBD 

M 

If 

tl 

3 Bits 

11 

II 

Beam Current Step 

' It 

II 

tl 

II 

11 

P 

II 

It 

4 Bits 

11 

11 

Exposure 

II 

IT 

It 

f] 

11 

II 

It 

11 

6 Bits 

11 

II 

Power On/Off 

ti 

11 

DIS 

11 

One 

n 

tl 

tl 

NA 

<l/Hour 

GND 


*Planetary missions only 

**Not on Out-of-Ecliptic mission 


Signal Interface List 


Signal Harae/Symbol 

Source 

Dest. 

Type 

Class 

IR Radiometer;** 
Power On/Off 

CCS 

Radiom 

DIS 

TBD 

Mirror Advance 

It 

11 

DIG 

It 

Channel Select 

11 

It 

11 

It 

Gain Step 

U 

It 

It 

11 

UV Spectrometer; **(bl 
Power On/Off 

CCS 

Spect 

DIS 

II 

Calibrate On/Off 

It 

11 

B 

II 

Reset Mux 

11 

It 

11 

It 

Channel Select 

II 

II 

DIG 

II 

Plasma Analyzer; 
Power On/Off 

CCS 

ANAL 

DIS 

H 

High Volt On/Off 

It 

H 

M 

tl 

Channel Sweep Start 

11 

11 

II 

It 

lon/Heutral Mass Spectrometer:** 
Power On/Off 

CCS 

Spect 

DIS 

11 

Ion Spectrum Scan . 

II 

» 

11 

tl 

Neutral Spectrum Scan 

11 

11 

i> 

11 

Gain Step 

II 

It 

DIG 

11 

Radar Altimeter:*** 
Power On/Off 

11 

Radar 

DIS 

11 

Gain Step 

t) 

II 

DIG 

n 


**Knt on Out-of “Ecliptic mission 

***EncIce Rendezvous mission only 

(b)0n Out-of-Ecliptic -ission replace by UV Photopolarimeter 


No, 

of 

Wires 

Imped. 

Voltage 

Resolu- 

tion 

No. 

of 

Words 

Sampling 

or 

Update 

Rate 

GND/CCS 

Logic 

One 

TBD 

TBD 

KA 

NA 

<1/Day 

GNO 

TBD 

ir 

n 

II 

Z Bits 

1/Sec 

CCS 

tl 

It 

It 

It 

4 Bits 

1/8 Sec 

11 

It 

11 

It 

11 

4 Bits 

1/Hour 

II 

One 

It 

tl 

11 

KA 

<1/Day 

GND 

tl 

It 

n 

It 

NA 

1/Hour 

n 

It 

II 

II 

It 

rw 

1/Sec 

CCS 

TBD 

tl 

It 

IP 

4 Bits 

1/10 Sec 

II 

One 

» 

tl 

tl 

NA 

Once 

GND 

II 

It 

tl 

II 

It 

ii 

II 

tl 

11 

It 

It 

II 

10/Sec 

CCS 

One 

» 

tl 

tl 

KA 

Once 

GtlD 

It 

It 

11 

It 

It 

1/Sec 

CCS 

11 

n 

11 

II 

II 

11 

It 

TBD 

It 

II 

II 

4 Bits 

10/Hour 

u 

One 

II 

11 

II 

KA 

Once 

CCS - 

One 

tl 

n 

II 

4 Bits 

1/Hour 

It 


signal Interface List 


Signal Name/Syinbol 

Source 

Dest. 

Type 

Class 

Meteoroid Impact Optical: 
Power On/Off 

CCS 

Sensor 

DIS 

TBD 

High Volt On/Off 

n 

II 

II 

11 

Retardinq Pot Anal: 
Power On/Off 

CCS 

Anal 

DIS 

II 

Voltage Step 

0 

t1 

DIG 

II 

Plasma Wave Detector: 
Boom Deploy 

CCS 

Detector 

DIS 

IJ 

Sampling Rate 

l( 

tl 

DIG 

» 

Waveform Capture Start 

It 

11 

DIS 

II 

Elec Dipole Spec Scan 

II 

11 

II 

II 

Search Coil Spec Scan 

II 

11 

» 

11 

Loop Antenna Spec Scan 

II 

M 

11 

tl 

Waveform Read 

II 

II 

tl 


Power On/Off 

II 

11 

11 

II 

Magnetometer; 
'^cwer On/Off 

CCS 

Hag 

DIS 

It 

II 

Bias SW Pos Advance 

11 

II 

II 


Bias Step X 

11 

It 

DIG 

It 

Bias Step Y 


It * 

It 

IK 

Bias Step Z 

n 

It 

It 

II 

Boom Deploy ’ . 

11 

It 

DIS 

It 

Sensor Select 

II 

It 

DIG 

II 

« 


DIG 

DIS 

ANAL 


No. 

of 

Hires 

Imped. 

Voltage 

Resol u- 
tion 

No. 

of 

Words 

Sampling 

or 

Update 

Rate 

GND/CCS 

Logic 

One 

TBD 

TBD 

NA 

NA 

Once 

GND 

» 

II 

II 

It 

11 

Once 

tl 

One 

11 

II 

It 

NA 

Once 

tl 

TBD 

It 

It 

II 

6 Bits 

1/10 Sec 

CCS 

One 

II 

It 

II 

NA 

Once 

m 

TBD 

II 

II 

If 

3 Bits 

1/Hour 

CCS 

11 

II 

II 

11 

NA 

Once 

II 

M 

H 

11 

II 

ri 

ir 

II 

tl 

11 

II 


tl 

It 

II 

II 

II 

II 

It 

tl 

M 

It 

II 

tl 

11 

II 

M 

1/10 Sec 

It 

II 

II 

II 

tl 

tl 

Once 

GKD 

One 

II 

II 

11 

NA 

Once 

11 

tl 

» 

11 

11 

n 

11 

CCS 

TBD 

tt 

11 

II 

2 Bits 

1/Hour 

CCS 

It 

|] 

11 

n 

M 

11 

II 

11 

11 

11 

n 

II 

11 

II 

One 

31 

11 

II 

NA 

Once 

GND 

TBD 

II 

» 

11 

2 Bits 

<1/Day 

1! 


TOTAL 


16 


35 


0 


Attached Science Package (Typical ) Signal Interface List (CCS Inputs)* 


Signal Kame/Symbol 

Source 

Dest. 

Type 

Class 

No. 

of 

Wires 

Imped. 

Vol tage 

Resolu- 

tion 

No. 

of 

Words 

Sampling 

or 

Update 

Rate 

GHO/CCS 

Logic 

Scan Pltf Control: 

Deployment Armed (2) 

Pltf 

CCS 

DIS(2) 

Control 

Two 

TBD 

TBD 

NA 

NA 

Once 

NA 

Boom Deployed 

It 


" (2) 

TH 

tl 

II 

11 

II 

U 

II 

n 

Cone Angle 

It 

II 

DIG 

Cant 

TBD 

II 

II 

0.1« 

TBD 

1/30 SEC 

II 

Clock Angle 

tl 

It 

11 

11 

tl 

tl 

11 

II 

tl 

n 

tl 

Control Pwr On 

11 

11 

DIS 

TM 

One 

11 

It 

NA 

NA 

1/32 Hin 

II 

Harrow-Anqle TV:* ** 

Frame Count 

TV 

CCS 

CiG 

TM 

TBD 

t! 

11 

Count 

TBD 

1/Kin 

tl 

Drift Rate 

n 

II 

A 

ri 

n 

tl 

11 

1.5S! 

NA 

It 

It 

Line Count 

II 

11 

DIG 

II 

It 

II 

II 

Count 

TBD 

n 

II 

Light Level 

Ir 

tl 

A 

ir 

tl 

*1 

It 

\% 

NA 

II 

11 

Filter Position 

11 

It 

DIG 

TH 

11 

II 

II 

Count 

TBD 

D 

n 

Beam Current 

» 

II 

A 


Two 

It 

II 

n 

NA 

It 

tl 

Vidicon Temp 

ir 

n 

A 

TM 

II 

II 

II 

u 

It 

II 

It 

Optics Temp 

u 

a 

A 

TH 

11 

It 

11 

II 

II 

tl 

11 

Camera Id 

H 

It 

DIG 

Cent 

TBD 

tl 

n 

TBD 

TBD 

II 

II 

Power On 

a 

II 

DIS 

TH 

One 

B 

tl 

tiA 

NA 

1/32 Hin 

II 

IR Radiometer;** 

Mirror Position 

Radiom 

CCS 

DIG 

TH 

TBD 

tl 

II 

Count 

TBD 

1/30 Sec 

11 

Channel Ko. 

< 11 

11 

tl 

TM 

It 

II 

II 

Count 

n 

It 

II 

Detector Temp 

U 

tl 

A(2) 

tl 

Four 

II 

n 

O.IX 

NA 

1/Hin 

II 

Detector Volt ‘ . 

11 

11 

A 

It 

Two 

11 

n 

II 

n 

II 


Power On 

tl 

It 

DIS 

Tri 

One 

11 

tl 

HA 

(1 

1/32 Hin 

It 


*P1anetary missions only 

**Hot on Out-of-Ecliptic mission 


Signal Interface List 


Signal Natne/Symbol 
UV Spectroraeter:**fb) 





No. 

of 



Resolu- 

No. 

of 

Sampling 

or 

Update 

GN D/CCS 

Source 

Dest. 

Type 

Class 

TM 

Wires 

Imped. 

Voltage 

tion 

Words 

Rate 

Logic 

Hux Step 

Spec 

CCS 

DIG 

TH 

TBD 

TBD 

TBD 

Count 

TBD 

1/30 Sec 

NA 

Detector Temp 

It 

M 

A 

II 

Two 

11 

n 

1 % 

NA 

11 

It 

High Voltage 

II 

tl 

A 

11 

II 

11 

II 

0.1S5 

tt 

II 

It 

Channel 

II 

» 

DIG 

TH 

TBD 

11 

tl 

Count 

TBD 

11 

It 

Power Dn 
Plasma Analyzer: 

11 

II 

DIS 

TH 

One 

11 

It 

NA 

NA 

1/4 Min 

tl 

Channel Step 

ANAL 

tl 

DIG (2) 

Cont 

TBD 

tl 

n 

Count 

TBD 

1/30 Sec 

tl 

High Vol tage 

11 

II 

A 

Cont 

Two 

11 

It 

0,13! 

NA 

It 

tl 

Power On 

lON/Heutral Hass Spect:** 

II 

Tt 

DIS 

TM 

One 

tl 

n 

NA 

11 

1/32 Hin 

tl 

Anode Voltage 

Spect 

II 

A 

TM 

Two 

tl 

II 

1 % 

NA 

1/30 Sec 

tl 

Ionization Voltage 

II 

II 

A 

» 

11 

II 

It 

1 . 5 % 

11 

■1 

tl 

Gain Step 

11 

tl 

DIG 

TH 

TBD 

11 

11 

Count 

TBD 

1/2 Hin 

II 

Ion Current 

11 

tl 

A 

n 

Two 

11 

It 

O.IX 

NA 

1/30 Sec 

11 

Pov/er On 

Meteoroid Impact Optical: 

tl 

II 

Di” 

II 

One 

J| 

It 

NA 

11 

1/32 Hin 

11 

Voltage 

Sensor 

II 

A 

TH 

Two 

tl 

It 

1.53! 

NA 

1/2 Hin 

tl 

Power On 

Retardinq Pot Anal: 

II 

II 

DIS 

TM 

One 

11 

tt 

NA 


1/32 Kin 

F- 

Voltage 

AflAL 

II 

A 

TH 

Two 

11 

It 

1% 

NA 

1/30 Sec 

II 

Negative Ion Current ; 

(1 

tl 

A 

11 

H 

ri 

tt 

tl 

11 

II 

II 

Power On 

Radar Altfmeter;*** 

tl 

II 

DIS 

TH 

One 

II 

tl 

NA 

n 

1/4 Hin 

11 

Power On 

Radar 

11 

DIS 

TH 

11 

II 

It 

NA 

HA 

Once 

II 

Gain Step 

It 

11 

DIG 

TH 

If 

II 

II 

Count 

One 

1/Hour 

II 

High Voltage 

**No't on Out-of-Ecliptic mission 
t**Encfie Rendezvous mission only 

It 

11 

A 

Control 

Two 

u 

n 

1% 

NA 

11 

11 


(b)6n Out-of-Ecliptic mission replace by UV Photopclarimeter 




Signal Interface List 


Signal Kame/Symbol 

Source 

Dest. 

Type 

Class 

Plasma Wave Detector; 





Boom Deployed 

Detector 

CCS 

OIS 

TM 

Sampling Rate 

r> 

It 

DIG 

11 

Waveform Capture Stopped 

n 

II 

DIS 

II 

Spacecraft Potential 

u 

11 

A 


DC Magnetic Field 

u 

II 

A 

II 

Voltage 

n 

11 

A(3) 

It 

Power On 

ir 

tl 

DIS 

TH 

Hacmetometer; 





Boom Deployed 

MAG 

II 

DIS 

It 

Bias SW Position 

II 

It 

0IGC3) 

Control 

Bias Voltage 

II 

It 

A(3) 

TH 

Null Current 

It 

11 

A(3) 

tl 

Sensor Select 

11 

ti 

DIG 

n 

Power On 

ir 

ti 

DIS 

TH 




DIG 

DIS 

TOTAL 



19 

18 



Ho. 

of 



Resolu- 

Ho. 

of 

Sampling 

or 

Update 

GHD/CCS 

Wires 

Imped. 

Voltage 

tion 

Words 

Rate 

Logic 

One 

TBD 

TBD 

HA 

HA 

Once 

HA 

TBD 

II 

II 

Count 

TBD 

1/4 Hin 

It 

One 

It 


HA 

HA 

1/30 Sec 

R 

TVro 

It 

(I 

0.1« 

It 

11 

tl 

Two 

It 

n 

O.IS 

It 

11 

11 

Six 

n 

11 

IS 

11 

II 

M 

One 

M 

]| 

HA 

tl 

1/4 Hin 

n 

One 

11 

II 

NA 

NA 

Once 

It 

TBD 

11 

II 

Count 

TBD 

1/30 Sec 

ft 

Six 

11 

It 

IX 

HA 

II 

n 

Six 

It 

H 

It 

n 

11 

n 

l^D 

n 

tl 

Count 

TBD 

11 

IT 

One 

ANALOG 

29 

11 

11 

NA 

HA 

1/32 Hin 

n 


APPENDIX B 

SEPS DETAILED SOFTWARE SIZING 


SEPS PLANETARY MISSION 


DETAILED SOFTWARE SIZING 



INSTRUCTIONS 

DATA 

TOTAL 

^^AX 

EXECUTION 

SPEED 

SUBSYSTEM/FUNCTION 

(16-BITS) 

(16rBITS) 

(16-BITS) 

RATE 

(KAPS) 

EXECUTIVE 

Task Management 

275 

350 

625 

1/sec 

0.28 

Interrupt Processor 

60 

20 

80 

2/sec 

0.12 

Discrete Processor 

170 

80 

l'*0 

1/sec 

0.17 

I/O Supervisor 

120 

40 

160 

1/sec 

0.12 

Power Up Initialization 

190 

70 

260 

N/A 

— 

Hath Utility Routines 

300 

0 

300 

1/10 sec 

0.03 

Common Data 

0 

500 

500 

N/A 

— 

PROPULSION 

Initialization 

126 

16 

142 

1/sec 

0.13 

PPU/ThriJster On/Off Sequence 

276 

100 

376 

1/sec 

0.28 

Performance Monitoring 

306 

56 

362 

1/sec 

0.31 

Thrust Level Control 

156 

36 

192 

1/hr 

T- 

Conf i gurati on/Reconf i gurati on 

204 

50 

254 

1/sec 

0.20 

Propellant Management 

135 

15 

150 

1/hr 


ATTITUDE CONTROL 

Inertial Attitude Reference 

342 

no 

452 

1/sec 

0.34 

Initialization/Reinitialization 

55 

10 

65 

1/sec 

0.06 

Star Tracker Processing 

374 

70 

444 

1/min 

0.01 

Attitude Update 

402 

240 

642 

1/min 

0.01 

TVC/RCS Processing 

390 

173 

563 

1/sec 

0.39 

Solar Array Orientation 

100 

40 

140 

1/tnin 

— — 

Mode Control 

150 

27 

177 

1/min 

— 


INSTRUCTIONS 


SUBSYSTEH/FUNCTION (16-BITS) 

GUIDANCE AND NAVIGATION 

Midcourse Guidance 0 

Approach Guidance 30 

DATA HANDLING . 

Telemetry Processing 100 

Data Storage Management 40 

COMMUNICATIONS 

Antenna Pointing and Control 149 

Comnand Processing 1300 

Mode Crntrol 70 

SOLAR ARRAY 

Length Control 75 

Peak Power Computation 75 

POWER DISTRIBUTION 

Equipment Control 150 


L 


L 


DATA 

TOTAL 

MAX 

EXECUTION 

SPEED 

(16-BITS) 

(16-BITS) 

RATE 

(KAPS: 

70 

70 

1/10 sec 


10 

40 

1/sec 

0.03 

592 

692 

1/sec 

0.10 

10 

50 

1/sec 

0.04 

31 

180 

1/sec 

0.15 

374 

1674 

1/4 sec 

0.32 

10 

80 

1/min 


15 

90 

1/sec 

0.08 

15 

90 

1/sec 

0.07 

200 

350 

1/sec 

0.15 


INSTRUCTIONS 


SUBSYSTEM/FUNCTION 

(16-BITS) 

MECHANISMS 


Antenna Deplo^/ment 

0 

Solar Array Deployment 

0 

Other Mechanisms Seq. 

0 

Payload Sequencing 

0 

Miscellaneous 

0 

THERMAL 



REDUNDANCY MANAGEMENT 


Attitude Control 

300 

Guidance and Navigation 

0 

CCS/DHS 

735 

Power Distribution 

156 

Communications 

51 

Propulsion 


SCIENCE PACKAGE 



Instrumentation Control 150 


DATA 

TOTAL 

MAX 

EXECUTION 

SPEED 

(16-BITS) 

(16-BITS) 

RATE 

(KAPS) 


5 

5 

N/A 

0 

13 

13 

N/A 

0 

17 

17 

N/A 

0 

20 

20 

N/A 

0 

50 

50 

N/A 

0 


NO CCS LOGIC REQUIRED 




152 

452 

1/sec 

0,30 

0 

0 

0 

0 

79 

814 

1/sec 

0.73 

73 

229 

1/sec 

0.16 

51 

102 

1/10 sec 

— 

(SEE PROPULSION SUBSYSTEM SIZING) 



50 

200 

1/10 sec 

0.01 


TOTAL 


11352 


4.59 


X- 1 j 


SEPS EARTH ORBITAL MISSION 
DETAILED SOFTWARE SIZING 


B-6 


SUBSYSTEM/FUNCTION 

EXECUTIVE 


INSTRUCTIONS 

(16-BITS) 


DATA 

(16-BITS) 


MAX 

TOTAL EXECUTION 

(16-BITS) RATE 


SBEED 

(KAPS) 


Task Management 275 
Interrupt Processor 60 
Discrete Processor 170 
I/O Supervisor 120 
Power Up Initialization 190 
Math Utility Routines 300 
Common Data 0 

PROPULSION 

Initialization 126 
PPU/Thruster On/Off Sequence 276 
Performance Monitoring 306 
Thrust Level Control 156 
Con f i gura ti on/Reconf i gurati on 204 
Propellant Management 135 

ATTITUDE CONTROL 

Inertial Attitude Reference 342 
Initial izati on/Rei ni ti al i zati on 55 
Star Tracker Processing 374 
Attitude Update 402 
TVC/RCS Processing 430 
Solar Array Orientation 100 
Mode Control 150 


350 

625 

1/sec 

0.28 

20 

80 

2/sec 

0.12 

80 

250 

1/sec 

0.17 

40 

160 

1/sec 

0.12 

70 

260 

N/A 


0 

300 

1/10 SBC 

0.03 

500 

500 

N/A 

— 


16 

142 

1/sec 

0.13 

100 

376 

1/sec 

0.28 

56 

362 

1/sec 

0.31 

36 

192 

1/hr 

— 

50 

254 

1/sec 

0.20 

15 

150 

1/hr 

— 


no 

452 

1/sec 

0.34 

10 

65 

1/sec 

0.06 

220 

594 

l/m1n 

0.01 

240 

642 

1/min 

0.01 

188 

618 

1/sec 

0.43 

40 

140 

1/min 

— 

27 

177 

1/min 

— 
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MAX 


|!_ ; 
n 
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INSTRUCTIONS 

DATA 

TOTAL 

EXECUTION 

SPEED 


SUBSYSTEH/FUNCTION 

GUIDANCE AND NAVIGATION 
LOW-AUTONOMY-BASELINE 

(16-BITS) 

06-BITS) 

(16-BITS) 

RATE 

(KAPS) 


Mid-course Guidance 

275 

50 

325 

1/10 sec 

0,03 


State Propagation 

900 

100 

1000 

1/sec 

0.90 


Sun Direction Determination 

240 

27 

267 

1/min 

— 


Navigation Update 

0 

0 

0 

— 

— 


Target State Propagation 

150 

20 

170 

1/min 

— 


Laser Radar Processing 

65 

35 

100 

1/sec 

0.06 


Rendezvous Guidance 

150 

35 

185 

l/sec 

0.15 


Mode Control 
HIGH-AUTONOHY-OPTIONAL 

40 

10 

50 

1/min 


• 

Mid-course Guidance 

6000 

700 

6700 

1/10 sec 

0.60 


State Propagation 

900 

100 

1000 

l/sec 

Q.9Q 


Sun Direction Determination 

240 

27 

267 

1/min 

— 


Navigation Update 

1000 

500 

1500 

1/hr 

— 


Target State Propagation 

150 

20 

170 

1/min 

— 


Laser Radar Processing 

400 

no 

510 

l/sec 

0.40 


Rendezvous Guidance 

600 

300 

900 

l/sec 

0.60 

— 

Mode Control 

40 

10 

50 

1/min 

— 


DATA HANDLING 

Telemetry Processing 

100 

615 

715 

l/sec 

0.10 


Data Storage Management 

40 

10 

50 

l/sec 

0.04 

\ 
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INSTRUCTIONS 


SUBSYSTEM/FUNCTION 

(16-BITS) 

COMMUNICATIONS 


Low Gain Antenna Switch 

14 

Coramancl Processing 

980 

Mode Control 

70 

SOLAR ARRAY 


Length Control 

75 

Peak Power Computation 

75 

POWER DISTRIBUTION 


Equipment Control 

150 

MECHANISMS 


Solar Array Deployment 

0 

Other Mechanisms Sequencing 

0 

Payload Sequencing 

0 

Miscellaneous 

0 

THERMAL 



DATE 

TOTAL 

MAX 

EXECUTION 

SPEED 

(16-BITS) 

(16-BITS) 

RATE 

(KAPS; 

3 

17 

N/A 


309 

1289 

1/4 sec 

0.24 

10 

80 

1/min 


15 

90 

1/sec 

0.08 

15 

90 

1/sec 

0.07 

200 

350 

1/sec 

0.15 

13 

13 

N/A 

0 

17 

17 

N/A 

0 

20 

20 

N/A 

0 

75 

75 

N/A 

0 


NO CCS LOGIC REQUIRED 



INSTRUCTIONS 

DATA 

TOTAL 

MAX 

EXECUTION 

SPEED 

SUBSYSTEM/FUNCTION 

(16-BITS) 

(16-BITS) 

{16-BITS) 

RATE 

(KAPS) 

REDUNDANCY MANAGEMENT 

Attitude Control 

300 

152 

452 

1/sec 

0.30 

Guidance and Navigation 

100 

50 

150 

1/sec 

0.10 

CCS/DHS 

(400) 

735 

(200) 

79 

(600) 

814 

1/sec 

(0.40) 

0.73 

Power Distribution 

166 

73 

229 

1/sec 

0.16 

Communications 

51 

51 

102 

1/10 sec 


Propulsion 

TOTAL 

(SEE PROPULSION SUBSYSTEM SIZING) 

12989 

(22439) 


5.60 

(7.26) 


( ) - High-autonomy G&N (optional) 
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APPENDIX C ; 

THE FAULT TOLERANT MEMORY BREADBOABD ; 

1.0 INTRODUCTION i 

The fault tolerant memory breadboard design was accomplished under Technical 

Directive No. 28, Contract No. NAS8-20899. The design effort included the 

system design and LSI chip design for a system to be flight packaged, together | 

with the design effort for the breadboard which functionally emulates the flight 

system. That design was carried through fabrication, checkout and demonstration i 

to the C.O.R. under this contract number. The F.T.M, is the most critical of the 

functional elements which have been described in this document as being mandatoiy ; 

to satisfying the SEPS reliability requirements. Shown in Page C-2 is the Bread- ; 

board Panel Layout which shows the versatility in exercising fault injection and : 

fault correction. The purpose of the breadboard is to demonstrate the error . , 

i 

I 

correction and detection capabilities of the system and the fault secure properties ' 

of the logic design. The principles of operation of the breadboard are explained 
in a paper entitled A MEMORY SYSTEM DESIGN WHICH CAM TOLERATE MULTIPLE STORAGE j 

ARRAY FAULTS which is included and forms a part of this appendix. ?! 

2.0 PHYSICAL DESCRIPTION [I 

Ti 

\\ 

The logic portion of the breadboard is implemented in commercially available TTL j| 

i! 

i f 

packages. These are mounted on an EECO plane with solderless wrapped interconnections. ii 

i I 

Also contained on the plane are receptacles which accept three memory cards each | ‘ 

organized as 8192 X 9 bit arrays. The storage cards contain necessary support drivers ? | 

i 

as well as address decoding. The cards are standard IBM commercial technology and 
contain the same monrlithic LSI storage chips as will be used in the flight system. 
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The EECO plane containing the circuitry is mounted on drawer slides and contained 
in an OPTIMA, housing. A display and control panel is also mounted rigidly to the 
drawer slides. Access to the plane is obtained by sliding the front panel and 
plane out of the housing. Access to both the top and the bottom of the plane 
and to the front and the back of the control/display panel are thus obtained. Cabling 
to the assembly is sufficiently long and flexible that the assembly may be removed 

entirely from the housing and still operate. 

Three regulated voltage supplies are mounted to the floor of the cabinet. A fan 
which circulates cooling air to the plane is mounted on the rear of the drawer. 

A suitable opening at the rear of the cabinet provides the air intake and a 
perforated top allows venting of the exhaust air. 


3.0 OPERATIONAL DESCRIPTION 


The breadboard is primarily a manually operated system having no associated processor. 
Provisions have been included within the design for expansion to a configuration 
utilizing the breadboard as a fault tolerant portion of a CPU memory. Under this 
expanded version, the CPU would also serve as the system controller via the I/O 
interface. The operation of the breadboard is controlled through the mode control 
switches whose basic functions will be described. 

Reference the Fault-Tolerant Memory Panel Layout 

ONLINE-OFFLINE - The online position of this switch is presently inoperable but 
would be used to transfer control and data lines to the memory port of the Hybrid 
Technology Computer (HTG) . In the online position the breadboard would function as 
an 8K halfword fault tolerant memory. In the offline position, the switch causes 
the breadboard to be under manual control of the other mode switches. 
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SINGLE CYCLE-FREE RUN “ The single cycle position of this switch is the normal 
setting. The free run position is provided for debug and causes the breadboard 
to perform memory cycles continuously at approximately 600 KHz. In the single cycle 
position, the breadboard will perform one memory cycle each time the START button 
is depressed. 

START “ Depression of this button causes the breadboard to perform one memory 
cycle each time it is depressed if in the single cycle mode or initiates the free 
run mode. 

READING and WRITING MEMORY - Any of the 8192 word addresses may be selected by 
setting the desired binary address in a group of thirteen *BSM ADDRESS' switches. 

Binary data to be written into the selected address of memory is determined by the 
setting of a group of eighteen 'WRITE DATA' switches, sixteen data bits, and two 
parity bits (odd parity) , 

With the READ/WRITE panel toggle switch set to write, depression of the start 
switch will cause the parity encoded word to be parity checked. If parity is 
incorrect a 'CPU Parity* light comes on and the write cycle is converted to a read 
of the same address. If the parity is correct six check bits are generated, checked, 
and stored along with the sixteen data bits in the selected memory address. The 
byte parity bits are not stored. 

Read operations are performed by setting the address switches to the binary address 
of the selected word, setting the read/write mode control switch to 'READ', and depress 
ing the start button. The word from storage is transferred into the SDR and the 
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consistency of the data and check bits is determined in accordance with the error 
encoding. Concurrently, byte parity bits are generated. If the word contains no 
errors no error lights come on. However, if there is an error a single 'bit in 
error' light will come on at the location of the errant bit. In the event there is 
a double error a 'double data' error light will come on signaling the condition 

but there is no indication of the locations of the bits in error, however. 

FAULT- INJECTION - Faults can be deliberately injected into the system by means of 
twenty-two 'BIT FAULTING' three position switches. In the 'OFF' (center) positon no fault 

is injected, the '1' position causes the corresponding bit location to be stuck-at-1 
(s-a-l),and the 'O' position causes the corresponding bit location to be stuck-at-0 
(s-a-0) . Thus none, any, or all bits of a word read can be faulted. This facility 
permits system behavior under multiple fault conditions to be readily observed. 


In addition to simulating faults in the storage array, faults may be injected into 
the translator logic to simulate faults in it. This is done by means of two sixteen 
position wheel switches. The zero position of each switch injectc no faults. The 
remaining fifteen positions on each switch inject faults as follows: * 


Switch Position 

0 

1 

2 

3 

4 


Left Switch 
No Fault 

Syndrome 1 partial 
Syndrome 3 partial 
Syndrome 5 partial 
Syndrome 2 combined 


Right Switch 
No Fault 

Syndrome 2 partial 
Syndrome 4 partial 
Syndrome 6 partial 
Sjmdrome 1 combined 


* Refer to Figure 4 of the paper for a description of partial and combined syndrome 
outputs, and to Figure 7 of the paper for descriptions of the other signal parts. 
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5 

Syndrome 4 

6 

Syndrome 6 

7 

Syndrome P 

8 

Syndrome Q 

9 

PRS Parity 

10 

Spare 

11 

Spare 

12 

Spare 

13 

Spare 

14 

Spare 

15 

Spare 


With the exception of the right switch 
is done by inverting the signal on the 


Right Switch 

Syndrome 3 combined 
Syndrome 5 combined 
Syndrome R combined 
Syndrome S combined 

T XOR R 
Spare 

Error Analysis RCCO 
Error Analysis Parity 
Super Parity 
Fail Corrector 
Spare 

position 14 the above fault injection 
line where the fault is injected. Since the 
the translator has both O's and I's on 


dynamically self-checking circuitry in 
the lines during normal operation, it is necessary to invert whichever value happens 
to be present at the time of fault-injection in order to simulate faulty line values. 


Switch Position L eft S witch 

combined 
combined 
combined 
combined 


RECONFIGURATION - The breadboard provides for functionally replacing any one of the 
twenty-two normal bit planes with a spare bit plane. To be effective tie appropriate 
correct information must be written into this spare bit plane. The procedure for 
loading good information into the spare is to read each word including the bit from 
the bit plane to be replaced, correcting the error if present with the hardware; then 
storing the word at the same address but writing the correct bit into the spare bit 
plane as well as the bit plane being replaced. This procedure is done once for each 
word address, and when all word addresses have been restored, the spare bit plane 
will contain all correct bits. Provision is made in the breadboard for performing 


C-7 


this reconfiguration sequence automatically, on all or any selected portion of the 
memory by means of the group of reconfiguration control switches. The CPU/Panel 
switch is set to "PANEL'. Three registers must be loaded for reconfiguration selected 
by the 'REGISTER SELECT' switch. The word to be set in these registers are set in 
the 'ESCONEIGURE DATA' switches. All thirteen switches are used for 'WORD COUNT' 
and 'STARTING ADDRESS', but only six (0-5) are needed for 'SPARE ASSIGNMENT'. The 
binary number representation is used for word count and starting address. The 
spare assignment code is the code utilized in the parity check matrix described In 
the paper included in this Appendix. Starting address and spare assignment are 
loaded first and word count LAST, The reason for this is that reconfiguration begins 
immediately upon loading the word count. 

Since there is circuitry in the breadboard for only one spare bit plane, sppre 
selection is not necessary; however, a pair of register select switches, now ineffective, 
are on the panel in the event that multiple (up to four) spares capability should ever 
be added. 

There is a group of three 'STATUS' lights: '^JRITE COMPLETE' is lighted after a 

write cycle is completed and is turned off when a new cycle is begun, BUSY and 
ADVANCE are illuminated while a memory cycle is in process. 

A 'DISPLAY SP, ASGN' button causes the light in the 'BIT IN ERROR' row to be 
lighted at the position to which the spare bit plane is assigned. The DISPLAY 
BSM DATA' button, when depressed, causes the 'SDR DATA' row of lights to display 
the input to the SDR rather than the contents of the SDR. 

There are two 'RESETS' buttons. The one labeled 'ERROR LATCHES' resets only the 
four error latches. The one labeled 'MASTER' resets the entire system. 
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4.0 


Conclusions 


The original purpose for the breadboard was to verify the design approach 
for the fault tolerant memory system. All aspects operate as designed. 

Faults may be Injected at will. All single bit errors may be detected, 
located, and corrected. All double errors are detected. Faults injected 
into the translator circuitry are detected on the first operation. Partial 
and total reconfigurations operate as designed, and the original BSM is kept 
current along with the assigned spare bit plane. Thus all features of the 
design operate as intended. 

The breadboard will be a useful tool in the development of reconfiguration 
strategies. The criteria for initiating reconfiguration has not been 
determined. Clearly, a log of errors encountered - their bit position and 
address location would be useful for determining system status. Reconfiguration 
should be deferred until it is determined that there is a sys^ *c fault in 
a bit plane which causes many errors in that bit plane. It ha« uuen calculated 
that an average of 92 random errors would be expected in an 8192 word memory 
before a double error was encountered. Thus reconfiguring each time an error 
is encountered is not an efficient strategy. 
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A MEHOHy SYSTEM DESIGH Hlliat CAM TOLERATE MULTIPLE STORAGE ARRAY FAULTS* 


C. E. McCarthjr M. C. Carter J. fi. UhlCc 

IBM Federal Systems Division IBM Thomas J. Watson Research Center NASA Marshall Space Flight Center 


Huntsville, Alabama York) own Heights, 


ABSTRACT 

The memory portion of an aerospace digital com- 
puter is typically much more prone to failure than 
the logical/ control portion, because of the larger 
circuit count. Various approaches for tolerating one 
or more memory failures have been taken on past and 
current aerospace programs — all dependent on mas- 
sive replication to achieve the fault tolerance. The 
advent of monolithic random access storage arrays pro- 
vides an efficient means of achieving acceptable reli- 
ability for the long term (e.g. 3 years) unmalntained 
space missions currently being planned. The approach 
Involves encoding the stored words in an error cor- 
recting code (ECC) and organizing the storage array 
Such that likely faults in the storage array manifest 
themselves as errors detectable and correctable by 
the ECC. 

A fault tolerant memory system for aerospace 
applications is currently under development. Salient 
features of this system are: 

o Storage redundancy at the bit plane level 
rather than at the whole array level. 

o Completely self-checking, self-testing trans- 
lator circuitry which utilizes the normal 
data flow to dynamically check the translator 
circuitry during normal operation. 

o "Lookaside" correction which bypasses the 

correction circuitry timing delays if correc- 
tion is unnecessary. 

o Level merging of the translator data flow 
logic to minimize circuit delays. 

o Code Independent chip designs. 

o Spare bit plane reconfiguration switching 
which enables up to four spare bit planes to 
replace any failed bit plane position. 

o Recovery of all Lost information from a bit 
plane failure by reading each address location, 
correcting the bit from failed bit plane if 
necessary, and storing the correct bit in the 
spare bit plane. 

o Tolerance of up to five massive bit plane 
failures by virtue of the error correction 
code and four spare bit planes. 

The storage array is to be comprised of basic 
memory modules, developed for the NASA SUMC Computer 
program. A breadboard demonstration model of the 
system has been assembled. It implements the storage 
array with the same storage chips that are used in 
the memory module. The translator logic Is imple- 
mented In commercially available TTL logic. Exten- 


Tho hardware design and implementation was supported 
by NASA Contracts HAS8-20899 and NAS8-30749 


New York Huntsville, Alabama 


slvc fault-injection capabilities are incorporated for 
verification of the system operation, performing ex- 
periments and developing reconfiguration criteria. 

1. INTRODUCTION 

Background 

Memory is not only a critical functional part of 
any airborne or spaceborne computational system but is 
also a major programmatic concern to each developer 
and user. The reasons for this arc perhaps obvious; 
for most airborne and space applications, a major por- 
tion of the cost, power, and weight can be attributed 
to memory; depending on the type of technology and 
the amount of memory employed, memory systems in the 
past have normally contributed between 65% to 85% of 
the failure rate of the entire computational sysccn. 
Although cheap, low powered, and highly reliable 
operational semiconductor memories for airborne and 
space applications have been projected for several 
years, only recently have they begun to surface as 
viable flight options. Dur.'ng the last few years, 
discrete improvements in the development of large 
scale integrated (LSI) circuits applicable to the 
central processing unit (CPU) have made the ratio of 
memory to CPU failure rates even more unbalanced than 
it had previously been. 

The Natioeal Aeronautics end Space Administra- 
tion (NASA) has employed fault-tolerant memories for 
several years on numerous programs. The Launch 
Vehicle Digital Computer (LVDC) of the Saturn IB/V 
program which was developed in the early 1960*s re- 
quired duplexed memory modules utilizing parity check- 
ing and sense amplifier current monitoring to resolve 
conflicts in case of disagreement in the duplexed 
pair of modules. This approach reduced the failure 
rate of a simplex memory by a factor of approximately 
Z5._ 

The computational system for the Skylab/Apollo 
TeLiscope Mount (ATM) utilized an entire computer 
system backup to the prime to provide the necessary 
reliability. The guidance, control, novlgatlon and 
data management computational system for Space Shuttle 
utilizes both triple modular redundancy (TMR) and 
standby spares. Generally, in the«-e systems massive 
redundancy was employed to obtain a small degree of 
fault-tolerance at the expense of increaelng complexity, 
power, and weight by a factor greater than two. Fu- 
ture payloads such as Spacelab, the Large Space Tele- 
scope (LST) , and Space Tug will undoubtedly require 
some form of memory error coding or redundancy because 
of either the long unmanned operating periods or the 
critical periods of operations where human life is in 
jeopardy. The Solar Electric Propulsion Stage (SEPS) 
is anotiicr application which requirca the utilization 
of a long life (three years) memory system. 
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In the pest, various techniques have been devel- 
oped and utilized to provide some degree oi memory 
failure detection, error correction, and system re- 
covery, ranging from simple parity, through more 
.sophisticated error coding schemes and organizations. 
Some rather sophisticated schemes have been described 
in the llterature^’^*^*^. Many of the approaches used 
in the past such as duplcKing and THR, are extremely 
complex from a hardvmre Implementation viewpoint and 
can tolerate only a single failure. Auburn University 
under contract NAS8-26930 to the Marshall Space Flight 
Center Is assessing trade-offs In such parameters as 
reliability, fault tolerance, ecomplexlty, power, 
vrslghC I and coverage for various schcmes^wWch have 
been proposed. The concept of coverage is a very 
Important parameter in dealing with long life systems. 


Features 


Some of the salient features of a fault-tolerant 
memory system required for airborne and space applica- 
tions are; 

o Memory organization to insure Independent 
failure modes within the system. 

o Techniques which yield a high degree of 
system coverage. 

o Fault- tolerant schemes which can bo imple- 
mented independent of Che technology employed. 

o Techniques which are Independent of system 
application l.e., can be used with either a 
simplex or redundant central processing unit, 

c. High degree of fault-tolerance with minimum 
increase in complexity. 

o Minimum, Impact in memory operating speeds. 

The fault-tolerant memory technique presented herein 
satisfies many of these features. 

The circuitry which implements the error correct- 
ing encoding is called a translator because a code-to- 
codc translation is done on every store and fetch 
operation. It is obvious that the translator is In a 
very strategic location relative to system operation. 
Undetected failures of the translator can invalidate 
the Information upon which the system operates. Fur 
this reason, the circuitry of the translator is de- 
signed to be dynamically self-checking and self- 
testing. The self-checking feature detects the 
occurrence of any single Component failure wherever 
It causes an erroneous result. The self-testing 
feature insures that every circuit Is tested during 
normal operation. 

This first section lays the foundation for the 
necessity of reliable memory systems in future space 
missions. The second section is an overall descrip- 
tion of Che system being implemented. A more de- 
tailed description of the LSI chips and their operat- 
ing features together with an illustration of the 
dynamic checking is given <n Section III. The experi- 
mental efforts Involved with system verification 
and reconfiguration strategy development are covered 
in Section IV. Section V gives conclusions end 
acknowledgments'. 


II. MBIQRY SYSTEM QVEFtVIEW 


The memory system design to be described has been 
implemented In a breadboard system. The breadboard 
has extensive fault Injection capabiilclcs. Experi- 
ments with Che breadboL.rd are currently planned with 
the objective of determining preferred reconfiguration 
CrltUi X.;. 


The LSI chip designs arc completed. Modules for 
packaging the chips were previously designed and are 
available. A flight package design of the system is 
currently underway — scheduled for completion In 1975 
and for prototype b»ild during 1976. 

Fault Tolerant Memory Organization and Operation 

Two major features distinguish this memory system 
from more conventional memory systems. The first fea- 
ture Is the organizat on of the array into Independent 
single bit wide planes. Each bit plane has its own 
address decoding as well as read/write storage ele- 
ments. The aecond feature Is the addition of a unit 
called the translator. On store operations the trans- 
lator receives information in byte parity encoded form 
from devices which utilize the memory and re-encodcs 
the data with an error correction code for storage. 

On read operations the translator checks the consist- 
ency of the check and data bits of the word read from 
memory. In the event of an error, it locates the 
eri.int bit and inverts it, thus correcting the error. 
When good set of data bits is determined, byte parity 
is generated by the translator for transmission to the 
requesting unit. 

Sparc bit planes are Incorporated Into the system. 
The combination of the Independent array organization, 
the error correction encoding, and the translator 
correcting capabilities facilitates sparing at a bit 
plane level rather than at the whole array level. In 
the event of a bit plane failure, a jpare bit plane 
may be substituted in the bad bit position. Hecovery 
is effected Ly reading the successive address locations 
In the memory, correcting a bad bit If necessary, and 
restoring the corrected word In the same address loca- 
tion, thereby providing good Information to the re- 
placement spare bit plane. 

There are four spare bit planes which enable up 
to five massive array failures to be tolerated . The 
storage array is comprised of basic memory modules 
(BMM's) which were developed for the MASA MSFC SUMC 
computer program. The BKM Is organized os an BK x 1 
bit array with on the chip address decoding. There is 
at least one BMM for each bit of the storage word. 

There would be 22 basic storage modules in an 
8K X z2 bit main store. Each bit plane would be com- 
prised of one BMM. For a 16,384 word array each bit 
plane would contain two BtlM's, etc. 

The 22 bit word length in the system being de- 
signed is comprised of 16 data bits and 6 chock bits 
to Implement a modified Hamming type single error 
corrcctydouble error detect code. This code was 
chosen because it Is efficient in circuitry, it de- 
tects all single and double errors and has good 
multiple error detecting properties. The choice of 
the Hannnlng code and the single bit wide independent 
array organization are consistent since likely single 
failures will be detected and corrected by the code. 
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This code would not be affective If the plane width 
wna greater than one- bit because isany likely failures 
could not be circumvented by the code. 

Figure 1 showo the overall organisation and 
functional partitioning of the syotem. The bit 
planes of the storage array are shown at the top. 
With the exception of the atorogo array blocks, all 
other blocks in Figure 1 represent bSl TTL logic 
chips. There arc six chip types represented, three 
of the types have multiple function usage within the 
system. 



Basic Translator Operation 

Referring to Figure 2, the basic tronslator Is 
partitioned Into five major data flow areas; an In- 
put multiplexer, a storage data register (SDR), 
parity trees, error analysis, and corrector. The SDK 
is the major working register for the translator. 

All data Inputs to be stored from external devices are 
read into the SDK and all data read from the storage 
array Is read Into the SDR. The Hamming encoded word 
read from main store Is validity checked by the 
parity circuits (syndromes) and the error analysis 
circuits. In the event that there Is no error de- 
tected, byte parity bits are generated and the word 
Is transmitted to the requesting device. In the event 
there is a single error indicated by the error 
analysis, Che syndrome pattern is decoded by the cor- 
rector. A correction signal Is generated on the ap- 
propriate bit in error line to the SDR where the bit 
is inverted, The cycle of checking the validity Is 
repeated and In the event that a correction was 
Indeed made, the byte parity bits arc generated and 
the word transmitted with the appropriate signal that 
a single error has occurred but was corrected. 
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III. HEiiORY SYSTEM IMFLE^IEMTATIOW FEATURES 


The Parity Check Hotrlx 

The translator design and operation follow closely 
the principles described in Reference The odd 
weight Hamming code Is structured as described In 
Reference 8. Let us consider first the parity check 
matrix of the Hamming code being used shown in Figure 
3. There are 16 data bit position columns labeled 1 
through 16. There are 6 check bit columns labeled Cl- 
C6. Eac^ check bit Is generated to give odd parity 
over the field consisting of Itself and 8 associated 
data bits In the same row of the matrix. Thus, Cl 
would be generated as 0 or 1 If data bits 1 through 8 
had odd or even parity, respectively. Similarly, 
checU bit 2 would be generated to gl”e odd parity over 
the field consisting of itself and data bits 6 through 
13. It should be noted that each column of the parity 
check matrix consists of an odd number of I's. The 
data bit columns have three I's and the check bit 
columns have a single 1, This Is the reason the code 
Is termed an odd weight code. 
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Error DctecElon and Locatloii 

On rend operations, each of six fields, consist'* 
Ine of eight data bits and an associated check bit, 
is cheeked for odd parlt/p The parity indication sig- 
nals generated for these six 9-bit fields arc colled 
syndromes labeled 51 - 56 in Figure 3. In the event 
that one or more syndromes indicate a discrepancy, an 
error is flagged. The pattern of the syndromes is 
analyzed to determine the type of error and, in the 
event of a single error, the syndrome pattern In- 
dicates the position of Che errant bit. 

Each data bit and each check bit has a unique 
pattern of I's In Its column, thus, if data bit 1 was 
in error, then syndromes 1, 3, and 4 would indicate 
discrepancies. The combination of syndromes (1, 3, 

4) uniquely Identifying data bit 1 as the errant bit. 
In this way, the syndrome patterns are decoded to 
locate a single bit error. 

Another feature of this odd weight code structure 
is that when an odd number of syndromes Indicate a 
discrepancy there Is a single correctable error and 
when an even number of syndromes indicate a discrep- 
ancy there is a double error. If a double error oc- 
curs the translator cannot correct the condition and 
the double error signal is used to disable the correc- 
tion function and to alert the system control that the 
situation exists. In the parity check matrix there is 
a total of nine I's in each row. This determines the 
maximum number of inputs to the parity trees which 
generate the syndromes. 


The same physical parity tree is used for generat- 
ing the check bits on store operations and generating 
the syndromes on read operations. Since odd parity is 
being used, an error free syndrome f<‘om the morphlc 
output is indicated by a 01 or a 10 signal on read 
cycles. In the event of a fault within the parity 
tree network which results In an erroneous output, only 
one leg of the tnorphic output will be effected. There- 
fore, single gate failures In these 'Ircults propagate 
to the output where they may bo detected. Thus an odd 
parity Input to a parity circuit, containing an error 
causing fault, will result in a 00 or 11 morphic output. 
Of course, an even parity Input to a fault-free parity 
tree, will also cause the morphic output to be 00 or 11. 

The Correction Decoder 

The correction decoder illustrated In Figure 5 
consists functionally of 27 six input AND gates which 
decode each of Che 20 combinDClons of six things taken 
three at a time, the six coiiainations of six things 
taken one at a time, and th* single combination of 
none of six. The outputs Iron the decoder arc wired 
to the appropriate SDR bit positions. All twenty of 
the three of six combinations are available on the 
chip, however, only the appropriate 16 are utilized for 
the sixteen data bit positions in the code we have 
chosen. The Inputs to the decoder are the combined 
outputs of the six syndrome parity trees. 
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T he Parity Trees 

The construction of the parity trees used in the 
translator augments the self-checking/self-testing 
properties of the translator. Figure 4 illustrates 
the organization for one of the three parity trees on 
a parity chip. There are nine input bits per tree and 
each tree is divided into a six bit section and a 
three bit section. There is a partial output for the 
six bit section of the tree and another for the three 
bit section. There Is also a combined output which 
represents the parity over all nine Input bits. The 
pair of partial outputs is called Che 'morphic* output 
of the parity network while the combined output Is the 
usual logical output. 
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The StoroRC Data Register 



PARTIAL COMDtNEO PARTIAL 
OUTPUT OUTPUT OUTPUT 


Fi.gure 6 Is a functional Illustration of one bit 
on the register chip. It is on this chip that the 
spare selection switching and the bit correction are 
effected. Each chip accommodates three such bits. 

The flip-flop register Is labeled FF. The input to 
the flip-flop is from a two input multiplexer. The 
input to this multiplexer in turn is either from a 
selection multiplexer, or from the complement output of 
the flip-flop. When a correction to a bit In the 
register is to be made, the approprlatn correction de- 
coder position is selected which defines the bit posi- 
tion to be corrected. Each decoder output line is 
wired to a unique register bit position and is show 
as the lino labeled correct. This signal switches the 
input of the multiplexer from the nomal spare selec- 
tion multiplexer node to the complement output of 'the 
flip-flop, and inverts the flip-flop. 


FtCUfil: A. FUNCTIONAL PARITY TREE REPBESEHTATION 


4 







I 


i 


J 


. J 


i - -i 




TO I^ARE U» 


KtOttTCn. E^AflE SmTGMIHtX AMD COftRECTIOM 
tlGtA^E i 


The upper multiplexer normally controls the in- 
put to the flip-flop. As shown, the input may be 
;rom an external user device, or from the correupond- 
Lng position Mt plane, or from any one of the four 
spare bit planes. The output of the four spare bit 
>lancs are available to each bit position of the 
storage data register. Thus, a spare bit plane may 
le utilized for any bit position. The output of the 
flip-flop is nvall.’Lle to Che external user devices, 

Eo the write line oJ the associated position bit plane, 
Eo the spare bit planes, and to the remainder of the 
translator circuitry. In Che event a spare bit plane 
bas been selected for this particular bit position, 
the output 'emultiplexcr directs the signal to the 
proper spare. Each of the four spares can receive bit 
Input information from any one of the SDR bit posi- 
tions. Thus, the SDR chips serve as the working 
register for the translator as well as the circuitry 
for correcting errant bits and spare reconfiguration 
uwttchlng. Note that the original bit plane assigned 
to a given position always has the current information 
written Into it even though the output from a spare Is 
being used for that particular bit position. The 
purpose of this is to maintain the bit plane current 
if possible, in the event that it is desirable to put 
it back on line at a future time. 

Horphle Logic 

The error analysis portion of the translator is 
perhaps the most unique portion. It is implemented in 
morphlc logic described lu Reference 9. The morphlc 
logic uses dual line pairs to replace the single lines 
in conventional logic. Morphlc logic functions are 
composed of conventional logic gates arranged as two 
independent tree structures so that a fault of a single 
gate in the morphlc logic propagates to the output 
where It can be detected. Circuits representing mor- 
phic invert, morphic AND, morphlc OR, morphlc 
exclusivc-OR, etc., have been devised. Combinations 
of these morphlc gates can be utilized to implement 
any logical function. The morphic logic equivalent of 
a conventional logic 1 is a 01 or a 10, jJqj, on the 

line pair. The morphlc logic equivalent of a conven- 
tional logic 0 is morphic line pair. For 

explanation of the error analysis circuits for this 
translator, the nomenclature 1 and 

mm ^ 

will be used. 


Error Analysis of Word Read From Storap.o 


The translator error analysis will be illustrated 
by explaining Its operation for checking the word read 
from storage. The verification of byte parity checking 
and generation and check bit generation will then be 
explained , 


The AND„ whoso output is labeled A In Figure 7 has 
Inputs from the morphlc output of the syndrome genera- 
tion parity trees SI - S6, Since odd parity is used 
in the encoding, on read-out all of the syndrome par- 
tial signals should be Ij^ if no error has occurred. 
Thus, the output A chould he Two parity trees ate' 

shown as the Input B in Figure 7, There arc an even 
number of syndromes (6). One each of the two morphic 
linos from each of the syndrome generators (the byte 
parity tree Inputa are inhibited during read cycles) 
are inputs to the two parity trees whose outputs form 
B. Since the syndrome no error condition is and 
there are overall an even number of syndromes, there 
should be in total an even number of morphic (and 
logical) l*s under a no error condition. Since this 
is true, both parity trees should have like parity 
either odd or even since the sum of two odds or of two 
evens is even. The input B in Figure 6 should be 0^^ 
under a no error condition. The AND^I gate whose output 
is P indicates NO ERROR as l^j when the A and B signals 
are normal. 
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Ths AND[^ gate whose output is Q indicates a trans- 
lator circuit failure condition. There is no valid 
condition of the inputs which causes outputs A and B to 
be !}.{ simultaneously. This condition is Indicative of 
a failure In the circuits which generate A or B. 
Therefore, the AHD^I gate whose output is Q senses this 
condition as a circuit error. 

A single error is manifest as an odd number of 
syndromes — one syndrome or three syndromes having a 
value of 0}]. Under this condition the output A will be 
a Ojj and the output B will be l^j. The output A is In- 
verted to make It a and combined with the output B 
which will be 1^ to cause signal R to bo 1^ — the sin- 
gle error condition signal. 
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The and gate whose output Is S senses a double 
error condition. The output A will be 0^ as will the 
output B In the presence of a double error in the word 
read from storage. Inversion of both these outputs 
makes them both and when combined In the AND^ gate, 
whose output Is s” indicates the double error condition. 

The ANDw whose output Is 0 indicates a circuit 
error condition. The Input U is for byte parity cir- 
cuit checks. The signal Q (mentioned previously) is 
inverted because its normal (no error) indication is a 
Of,. In order to maintain consistency all Inputs to 
the ANDfj shoi' ,d, under normal conditions, be Ijj’a. 

Therefore, the signal Q inverted la lj,j during 
nonnal operat.'on. The signal T is used for checking 
the validity of the generated check bits on write 
operations and the validity of the generated byte 
parity bits on read operations. It Is proved ' that 
with the code structure herein utilized the parity 
of the byte parity bits and the parity of the code 
check bits should be the satnej therefore, their com- 
bined parity should always be even. The signal T is 
the morphlc output of a parity tree whose inputs are 
the two byte parity bits and the six combined outputs 
of the parity trees which generate the check bits. 

The two parity trees with T and R inputs together 
with an inverter perform the logical operation T ° R 
which is true when there is a valid single error 
condition and no circuit failures. Certain circuit 
failures might be detected as a single data error 
without this check. 

A check Is made to see that there Is not an even 
number of the inputs P, R, and S in a 1^ state because 
P, R and S are mutually exclusive conditions. Should 
none or two of these three signals be up, there will 
be an even number of logical I's which, distributed 
between the two parity trees whose inputs are FRS, 
will make their output Oji. That is a failure indica- 
tion causing the output D to be 

This discussion of the read cycle operation is 
intended to illustrate how the morphlc logic is 
utilized to provide self-checking during normal 
operation. Since the normal data flow constantly 
changes, the translator circuits assume both 
states, which provides the self-Cestlng property. 


IV. EXPERIMENTAL SYSTEM 


Purpose 

An experimental breadboard of the memory system 
has been built. The breadboard has extensive fault 
Injcctloa and display circuitry incorporated under 
panel control. It implements the logic of the flight 
system described plus the necessary timing and con- 
trol hardware which enables it to operate as a stand- 
alone memory system. Future plans include Incorporat- 
ing a SUMC computer in the breadboard. 

A significant amount of simulation and analysis 
has been done to vorlfy the fault security and the 
self checking properties of the design. The bread- 
board system will permit much more extensive verifica- 
tion and statistical quantification ol those pro- 
perties, especially under conditions where failures 
result in various combinations of faults and errors. 


When the SUMC computer is included in the breadboard 
it will be practical to systematically generate pat- 
tci-ns In the memory and observe the dynamic behavior of 
the system and the inherent degree of independence the 
design possesses. 

The extensive analysis is a prerequisite for 
developing effective reconfiguration strategies — when 
to switch In a spare, and when to tolerate some few 
words with correctable errors which occasionally require 
a lengthened access cycle. Of course, an optimum re- 
configuration strategy is dependent on the application 
(the mission) as well as the behavioral properties of 
the system under various fault and error conditions. 

Fault Injection 

The experimental system has two types of fault in- 
jection: (a) The state of the line is at no fault, 

stuck-at-l, or stuck-at-O, and (b) The state of the 
line is either inverted (fault injected) or not Inverted 
(no fault Injected). The A type "stuck-at" faults are 
injiseted in each bit line of the array readout lines 
and each bit Is individually selectable. The B-type 
invert faults are utilized throughout the transistor 
logic. Each parity tree combined output and one leg 
of the morphlc output are subject to inversion under 
panel control. Uithi'i the error analysis, one leg of 
each morphlc block sho^m in Figure 7 ma:' be Inverted. 
Additionally, the correction decode circuits may be 
gated OFF to preclude making a correction in the pre- 
sence of a single error. 

The fault injection capabilities are believed to 
be adequate for duplicating virtually any condition It 
will be desired to study. 

Other Features 

The control panel displays by means of LED’s, the 
blt(s) being faulted, the fault Indication, and the 
error signals from the error analysis. In addition, 
there Is control of single cycle or free run mode. 
Provision is made to select a spare bit plane and as- 
sign it to any bit position (reconfiguration) and to 
select a starting word address and select any number of 
successive storage addresses to be restored. Thus, 
partial or total refurbishing may be utilized during 
a recovery cycle. 


CONCLUSIONS AND ACKNQWLEDGHEHTS 


The translator logic requires twenty chips. The 
syat-"m simulations indicate memory access times, with- 
out correction, to be of the order of three-fourths of 
a microsecond and one microsecond when correction is 
necessary. Loading a spare bit plane with good data 
could be done in less than two microseconds per stor- 
age location. The implementation and speed penalties 
arc thus not severe. Future emphasis is to be on de- 
signing the flight package, designing a fault tolerant 
system control, and devlsino the algorithms which 
implement the switching strategies. 
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We are also grateful to Mrs. Judy P, Hyde fjr her 
excellent typing and help In the preparation of this 
paper, and br. Aspl B. Wadla at Vorktown '/or his con- 
tributions to the error analysis design. 
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